Get Method

[eugene2009]

What is the proper wat to retrieve the variable in the mysql_query? I am having tons of trouble getting this little code to work. Please help

 

$id = $_GET['id'];
$result = mysql_query("SELECT * FROM comments WHERE id ='$id' ");
$row = mysql_fetch_assoc($result);


echo 'The customers name is, '.$row['name'].' and he made a purchase on, '.$row['date'].'.<BR>' ;

 

Please help me. Thank you

 

[Alex]

Besides the fact that it's vulnerable to mysql injections (Which you can correct by escaping $id with mysql_real_escape_string()) I don't see anything immediately wrong with that code. Exactly what isn't working?

[merylvingien]

$id = $_GET['id'];
$result = mysql_query("SELECT * FROM comments WHERE id ='$id' ");
$row = mysql_fetch_assoc($result);


echo "The customers name is,". "{$row['name']}". "and he made a purchase on,". "{$row['date']}". "<BR>";

[robert_gsfame]

What is the proper wat to retrieve the variable in the mysql_query? I am having tons of trouble getting this little code to work. Please help

 

$id = $_GET['id'];
$result = mysql_query("SELECT * FROM comments WHERE id =[b]'$id' "[/b]);
$row = mysql_fetch_assoc($result);

echo 'The customers name is, '.$row['name'].' and he made a purchase on, '.$row['date'].'.<BR>' ;

 

Please help me. Thank you

 

 

The code is correct but check WHERE id ='$id' ", erase the space between ' and "