Moreover, update_sql() does not accept % arguments. It only accepts one argument
with is the SQL, so you have to concatenate what you need apriori.
Sorry, yes, I misread db_query. What good is update_sql then? Hmm...Quoting mark burdett <mfburdett@gmail.com>:
> On Fri, Feb 29, 2008 at 8:01 AM, Earnie Boyd
> <earnie@users.sourceforge.net> wrote:
>> $sql[] = "UPDATE {profile_files} SET category = '%s' WHERE
>> LOWER(category) = '%s'";
>> $sql[] = 'Account settings';
>> $sql[] = 'account';
>> $ret[] = update_sql($sql);
>
> I guess this was an example of how it could work but doesn't?
> update_sql and db_query need a string as their argument and first
> argument, respectively.
>
I find a two plus years old ticket for this [1].
[1] http://drupal.org/node/36324