Jump to content

Mysql_Query function


faleira

Recommended Posts

Hey, I just started coding in php recently and I'm trying to make it so that my Mysql_Query function will be different depending on a $_GET variable, but because php variables aren't recognised in the middle of an sql query, I can't seem to figure out how to do it. I've tried looking around about this, but pretty much every article about that function i find, doesn't really seem to touch on this matter.

basically, what i'm trying to do is perform the sql query:
[code]Select * From (table) WHERE id=$_GET['value'][/code]

I can't seem to find a way around this problem. Could anyone tell me any method i could use so that i may do that?
Link to comment
https://forums.phpfreaks.com/topic/18508-mysql_query-function/
Share on other sites

you can put php variables in the middle of the query. your problem is probably with your quotes.  but you shouldn't put a get variable directly into a query anyways. big security hole.  you can do something like this:
[code]
$id = mysql_real_escape_string($_GET['id']);
$query = "select * from table where id = '$id'";
$result = mysql_query($query);
[/code]
Link to comment
https://forums.phpfreaks.com/topic/18508-mysql_query-function/#findComment-79712
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.