# \[SQLite\] Multiple UPDATE SETAs

**URL:** <https://forum.xojo.com/t/sqlite-multiple-update-setas/85054>\
**Category:** Databases\
**Created:** [April 18, 2025, 10:52am UTC](https://forum.xojo.com/t/sqlite-multiple-update-setas/85054 "2025-04-18T10:52:25Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![Emile\_Schwarz](https://forum.xojo.com/letter_avatar_proxy/v4/letter/e/90ced4/32.png) [@Emile\_Schwarz](https://forum.xojo.com/u/Emile_Schwarz)\
**Post date:** [April 18, 2025, 10:52am UTC](https://forum.xojo.com/t/sqlite-multiple-update-setas/85054/1 "2025-04-18T10:52:25Z")

</div>

The code below works fine:

```auto
SQL_Cmd = "UPDATE Contacts SET EntityName='" + TF_1_Entity.Text + "' WHERE ContactID=" + UniqueID.ToString +";"

Try
  db.ExecuteSQL(SQL_Cmd)

```

But if I add anothe Column either separated with a comma or AnD does not.

DO I fall into a bug ?

Latest Sequoia, MacBookPro M1, Xojo 2024r4.2.

Searches leads to nowhere.

Ideas ?

---

<div class="post-metadata">

**Author:** ![Emile\_Schwarz](https://forum.xojo.com/letter_avatar_proxy/v4/letter/e/90ced4/32.png) [@Emile\_Schwarz](https://forum.xojo.com/u/Emile_Schwarz)\
**Post date:** [April 18, 2025, 11:09am UTC](https://forum.xojo.com/t/sqlite-multiple-update-setas/85054/2 "2025-04-18T11:09:06Z")

</div>

As stupid as it seems, issuing multiple UPDATE

 SET works fine.

I mean:

```auto
db.ExecuteSQL("UPDATE Contacts SET EntityName='"

```

Change the Column Name / Value and all works fine.

---

<div class="post-metadata">

**Author:** ![Ezekiel\_Burke](https://forum.xojo.com/user_avatar/forum.xojo.com/ezekiel_burke/32/21272_2.png) [@Ezekiel\_Burke](https://forum.xojo.com/u/Ezekiel_Burke)\
**Post date:** [April 18, 2025, 11:16am UTC](https://forum.xojo.com/t/sqlite-multiple-update-setas/85054/3 "2025-04-18T11:16:41Z")

</div>

Have you tried doing a prepared statement instead?

Or maybe just something like this:

```auto
Var SQL_Cmd As String = "UPDATE Contacts SET EntityName = ? WHERE ContactID = ?"
db.ExecuteSQL(SQL_Cmd, TF_1_Entity.Text, UniqueID)

```

---

<div class="post-metadata">

**Author:** ![TimStreater](https://forum.xojo.com/user_avatar/forum.xojo.com/timstreater/32/586_2.png) [@TimStreater](https://forum.xojo.com/u/TimStreater)\
**Post date:** [April 18, 2025, 11:20am UTC](https://forum.xojo.com/t/sqlite-multiple-update-setas/85054/4 "2025-04-18T11:20:24Z")

</div>

For more than one column, it looks like this:

```auto
Var SQL_Cmd As String = "UPDATE Contacts SET EntityName = ?1, othercolumn=?2 WHERE ContactID = ?3"
db.ExecuteSQL(SQL_Cmd, TF_1_Entity.Text, otherval, UniqueID)

```

---

<div class="post-metadata">

**Author:** ![Emile\_Schwarz](https://forum.xojo.com/letter_avatar_proxy/v4/letter/e/90ced4/32.png) [@Emile\_Schwarz](https://forum.xojo.com/u/Emile_Schwarz)\
**Post date:** [April 18, 2025, 11:24am UTC](https://forum.xojo.com/t/sqlite-multiple-update-setas/85054/5 "2025-04-18T11:24:09Z")

</div>

Thank you.

$But this is where the trouble lies. I have 9 (or is it 10) Rows to update; try to plas-ce more than one SET in a line… (hint: that does not works? I tried with ‘AND’ and ‘,’…)  
My original (and not working) code:

```auto

SQL_Cmd = "UPDATE Contacts " + _
"SET EntityName = '" + TF_1_Entity.Text + "' "+_
"SET Address1 = '" + TF_2_Address1.Text + "' "+_
"SET Address2 = '" + TF_3_Address2.Text + "' " +_
"SET PO_Box = '" + TF_3_PO_Box.Text + "' " +_
"SET ZIP = '" + TF_4_Zip.Text + "' " +_
"SET City = '" + TF_5_Ville.Text + "' " +_
"SET Phone = '" + TF_6_Telephone.Text + "' " +_
"SET eMail = '" + TF_7_eMail.Text + "' " +_
"SET Web_URL = '" + TA_8_Web_Home.Text + "' " +_
"SET Notes = '" + TA_9_Notes.Text + "' " +_
"WHERE ContactID = " + UniqueID.ToString + ";"

```

THat is at the end of each line ('xcept the last) that I add ‘AND’, then ‘,’ and still get the trouble.

Using one Column at a time (Documenation, your suggestion) works fine.

I wasted the same amount of time for UPDATE than I use to add the code for the other usual commands… (my whole morning vs part of the night).

---

<div class="post-metadata">

**Author:** ![Ezekiel\_Burke](https://forum.xojo.com/user_avatar/forum.xojo.com/ezekiel_burke/32/21272_2.png) [@Ezekiel\_Burke](https://forum.xojo.com/u/Ezekiel_Burke)\
**Post date:** [April 18, 2025, 11:25am UTC](https://forum.xojo.com/t/sqlite-multiple-update-setas/85054/6 "2025-04-18T11:25:31Z")

</div>

I thought the numbering was only used for the SQL Server driver? What issues could arise without using the numbers? I have a few Xojo/SQLite apps that don’t number it.

---

<div class="post-metadata">

**Author:** ![Ezekiel\_Burke](https://forum.xojo.com/user_avatar/forum.xojo.com/ezekiel_burke/32/21272_2.png) [@Ezekiel\_Burke](https://forum.xojo.com/u/Ezekiel_Burke)\
**Post date:** [April 18, 2025, 11:27am UTC](https://forum.xojo.com/t/sqlite-multiple-update-setas/85054/7 "2025-04-18T11:27:42Z")

</div>

Hey Emile, you can only use 1 SET in a sqlite command. You would have to write individual update statements if you want to use SET for every column.

---

<div class="post-metadata">

**Author:** ![Emile\_Schwarz](https://forum.xojo.com/letter_avatar_proxy/v4/letter/e/90ced4/32.png) [@Emile\_Schwarz](https://forum.xojo.com/u/Emile_Schwarz)\
**Post date:** [April 18, 2025, 11:29am UTC](https://forum.xojo.com/t/sqlite-multiple-update-setas/85054/8 "2025-04-18T11:29:13Z")

</div>

That is what I see in Tim reply.

The reported error was:  
`Error 1: near “SET”: syntax error.

Thank You All.

---

<div class="post-metadata">

**Author:** ![Tim\_Parnell](https://forum.xojo.com/user_avatar/forum.xojo.com/tim_parnell/32/161_2.png) [@Tim\_Parnell](https://forum.xojo.com/u/Tim_Parnell)\
**Post date:** [April 18, 2025, 11:51am UTC](https://forum.xojo.com/t/sqlite-multiple-update-setas/85054/9 "2025-04-18T11:51:08Z")

</div>

The syntax is to only use the term SET once. You _need_ to be using a prepared statement.

```auto
UPDATE t_Contact SET Blank = ?, Blank2 = ?, Blank3 = ? WHERE ContactID = ?

```

---

<div class="post-metadata">

**Author:** ![Emile\_Schwarz](https://forum.xojo.com/letter_avatar_proxy/v4/letter/e/90ced4/32.png) [@Emile\_Schwarz](https://forum.xojo.com/u/Emile_Schwarz)\
**Post date:** [April 18, 2025, 12:02pm UTC](https://forum.xojo.com/t/sqlite-multiple-update-setas/85054/10 "2025-04-18T12:02:55Z")

</div>

with ExecuteSQL ? (API2)

---

<div class="post-metadata">

**Author:** ![Tim\_Parnell](https://forum.xojo.com/user_avatar/forum.xojo.com/tim_parnell/32/161_2.png) [@Tim\_Parnell](https://forum.xojo.com/u/Tim_Parnell)\
**Post date:** [April 18, 2025, 12:04pm UTC](https://forum.xojo.com/t/sqlite-multiple-update-setas/85054/11 "2025-04-18T12:04:54Z")

</div>

You can use API 2 or you can construct a `SQLitePreparedStatement` in API 1, but since you’re inserting user data directly you _need_ to do so to avoid (even unintentional) SQL injections.

A single-quote in any of the Text Fields above would destroy the SQL statement which could cause problems of all kinds.

Update: Something like this

```auto
const kSQL = "UPDATE Contacts SET EntityName = ?, Address1 = ?, Address2 = ?, PO_Box = ?, " + _
"ZIP = ?, City = ?, Phone = ?, eMail = ?, Web_URL = ?, Notes = ? WHERE ContactID = ?"

db.ExecuteSQL(kSQL, TF_1_Entity.Text, TF_2_Address1.Text, _
TF_3_Address2.Text, TF_3_PO_Box.Text, TF_4_Zip.Text, TF_5_Ville.Text, _
TF_6_Telephone.Text, TF_7_eMail.Text, TA_8_Web_Home.Text, TA_9_Notes.Text, _
UniqueID)

```

---

<div class="post-metadata">

**Author:** ![TimStreater](https://forum.xojo.com/user_avatar/forum.xojo.com/timstreater/32/586_2.png) [@TimStreater](https://forum.xojo.com/u/TimStreater)\
**Post date:** [April 18, 2025, 12:20pm UTC](https://forum.xojo.com/t/sqlite-multiple-update-setas/85054/12 "2025-04-18T12:20:56Z")

</div>

You can leave off the suffix but then have to be super careful to have the params in the same order they are asked for in the SQL statement. I’m using SQLite and leave the suffix off if there’s only one param, but always add it if there’s more than one.