Using AND in MySQL UPDATE command?

[Dreap]

$user_id = "55"
$updated_period = "5000"
$user_color = "blue"

mysql_query("UPDATE clients_table SET period = '$updated_period' WHERE client_id = '$user_id'");

I need to get somehow to make it update table where user id is 55 and color is blue. *so it wouldn't update other blue ones nor other client ids.

Can I simply use following?

mysql_query("UPDATE clients_table SET period = '$updated_period' WHERE client_id = '$user_id' AND user_color = '$user_color'");

[Readie]

Yup.

If you are going to allow users any control over what these variables are, I strongly suggest you concatonate them in, and run them though strip_tags() and mysql_real_escape_string()

[Dreap]

Yeah, I did that with your previous example already. Just tried to simplify the question.

Thanks once again :)