I have a question about a query, I am using the query to select lines from a database that would match po_number is the table. The problem is when I enter a po_number it may or may not include the character " - ". When I do not include the character just numbers & letters (123abs456) it returns the query with no problems, But when I use (123-abc-456) it gives me an error. rows, [] , error: Unknown column 456 in 'where clause' any help would be appreciated. [code] <? $orderid=$_GET['id']; $sql="select * from sc_order where po_number=$orderid"; mysql_select_db($dbname,$db); $result=mysql_query($sql); $dt=date('Y-m-d')." / ".date('h:i:s'); if(! $result || mysql_error() || mysql_num_rows($result) < 1) { echo sprintf('%s rows, [%s] , error: %s', @mysql_num_rows($result), $query, mysql_error()); exit; } else { echo"No errors found"; } ?> <table align="center" border="0" class="tablegreenl" width="70%"> <tr class="tablegreend"> <td><b>Date/Time</b></td> <td align="right"><b>User Name</b></td> <td align="right"><b>Database</b></td> <td align="right"><b>Product Id</b></td> <td align="right"><b>Quantity</b></td> <? if(mysql_num_rows($result)<1) { ?> <tr><td align="center" colspan="5">No Records</td></tr> <? } ?> <tr><td align="center" colspan="5"><hr></td></tr> <tr> <? while($rs=mysql_fetch_array($result)) { ?> <td><?=$dt?></td> <td align="center"><?=getname('sc_user','userid',$rs['userid'],'username')?></td> <td align="center"><?=$dbname?></td> <td align="center"><?=getname('sc_products','prod_id',$rs['prod_id'],'prod_name')?></td> <td align="center"><?=$rs['quantity']?></td> <tr> <? } ?> [/code]