adding a global variable

[Gazz1982]

I'm trying to create a global variable inputted from a form with name="myusername"

 

then use the variable in a sql query

 

 

$sql="Select * from login where EMAIL='________' ";

 

How would I do this?

[discomatt]

Assuming the form method is POST...

 

$_POST['myusername']

[Gazz1982]

so how would I utilise the varible in an sql query?

[silverblaze]

try using

 

if ur form's action is post use this:

 $sql="Select * from login where EMAIL='$_POST[myusername]' ";

if ur form's action is get use this:

 $sql="Select * from login where EMAIL='$_GET[myusername]' ";

 

hope this will help...

[discomatt]

Also, make sure you sanitize the user input, so they can't inject bad SQL into your query

 

$sql = 'SELECT `rows` FROM `login` WHERE `email` = \'' . mysql_real_escape_string( $_POST['myusername'] ) . '\'';