# Passing query string as a script

**URL:** <https://forum.inductiveautomation.com/t/passing-query-string-as-a-script/85772>\
**Category:** Ignition\
**Created:** [February 15, 2024, 5:00pm UTC](https://forum.inductiveautomation.com/t/passing-query-string-as-a-script/85772 "2024-02-15T17:00:30Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Faz](https://avatars.discourse-cdn.com/v4/letter/f/85e7bf/32.png) [@Faz](https://forum.inductiveautomation.com/u/Faz)\
**Post date:** [February 15, 2024, 5:00pm UTC](https://forum.inductiveautomation.com/t/passing-query-string-as-a-script/85772/1 "2024-02-15T17:00:30Z")

</div>

How do I pass a query string in a script?  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/6/5/655cd5cca5b5da19c391d4a6d90b515e9acc450d.png)

This script is not correct:

```auto
p1 = event.source.parent.getComponent('pid 1').intValue
p2 = event.source.parent.getComponent('SpecID').selectedValue
p3 = event.source.parent.getComponent('Data').text
p4 = event.source.parent.getComponent('DBColumn').selectedValue

parameters = {"pid":p1,
			"specID":p2,
			"data":p3,
			"column":p4}
	
system.db.runNamedQuery("UpdateSpec",parameters)

```

---

<div class="post-metadata">

**Author:** ![bkarabinchak.psi](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bkarabinchak.psi/32/83567_2.png) [@bkarabinchak.psi](https://forum.inductiveautomation.com/u/bkarabinchak.psi)\
**Post date:** [February 15, 2024, 5:04pm UTC](https://forum.inductiveautomation.com/t/passing-query-string-as-a-script/85772/2 "2024-02-15T17:04:01Z")

</div>

Seems like you are trying to pass {column} aka your `p4` variable correctly, QueryStrings get `{}`.

Are you getting any error or stack trace, that would be helpful in figuring out what is going wrong.

---

<div class="post-metadata">

**Author:** ![Faz](https://avatars.discourse-cdn.com/v4/letter/f/85e7bf/32.png) [@Faz](https://forum.inductiveautomation.com/u/Faz)\
**Post date:** [February 15, 2024, 5:06pm UTC](https://forum.inductiveautomation.com/t/passing-query-string-as-a-script/85772/3 "2024-02-15T17:06:22Z")

</div>

```auto
Traceback (most recent call last):
  File "<event:actionPerformed>", line 11, in <module>
com.inductiveautomation.ignition.client.gateway_interface.GatewayException: com.inductiveautomation.ignition.client.gateway_interface.GatewayException: com.microsoft.sqlserver.jdbc.SQLServerException: Incorrect syntax near '0'.

	caused by GatewayException: com.microsoft.sqlserver.jdbc.SQLServerException: Incorrect syntax near '0'.
	caused by Exception: com.microsoft.sqlserver.jdbc.SQLServerException: Incorrect syntax near '0'.

Ignition v8.1.33 (b2023101913)
Java: Azul Systems, Inc. 17.0.8

```

This is what i'm getting

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [February 15, 2024, 5:11pm UTC](https://forum.inductiveautomation.com/t/passing-query-string-as-a-script/85772/4 "2024-02-15T17:11:58Z")

</div>

Perhaps you should print out `p4` before the database call to see what it has. (I think you are getting a number from your dropdown, not a column name.

---

<div class="post-metadata">

**Author:** ![Faz](https://avatars.discourse-cdn.com/v4/letter/f/85e7bf/32.png) [@Faz](https://forum.inductiveautomation.com/u/Faz)\
**Post date:** [February 15, 2024, 5:17pm UTC](https://forum.inductiveautomation.com/t/passing-query-string-as-a-script/85772/5 "2024-02-15T17:17:39Z")

</div>

@pturmel you are absolutely right. I am sending the number. Corrected with string and now all good.  
Thank you all.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [February 15, 2024, 5:21pm UTC](https://forum.inductiveautomation.com/t/passing-query-string-as-a-script/85772/6 "2024-02-15T17:21:43Z")

</div>

Consider hardening your named query by using identifier quoting around the column name placeholder's curly braces. This reduces the chances that garbled data (or malicious data) can get through to your database.