Using variables in place of table names in query

[mcfmullen]

I have a url that goes as follows:

 

http://www.cool.com/page.php?type=Animal&animal=nameAnimal

 

I have a MySQL query as follows:

 

<?php
$tablename = $_GET['type'];
$animal = $_GET['animal'];

$sql = SELECT * from Animal;

What I want to do is have the query resemble something like:

 

$sql = SELECT * from $tablename;

 

But I am unable to get the proper syntax. Can anyone help me out?

[Alex]

This is more of a PHP syntax question, so I'm moving it to PHP coding.

 

To answer your question:

 

$sql = "SELECT * from $tablename";

 

You should really be validating that value though.

[mcfmullen]

Thank you for doing so. I didn't think this was a php question since it fits inside a MySQL query but I do hope someone can help me!

[Alex]

It is a PHP question because it deals with the PHP syntax of constructing the MySQL query and not about the syntax of the query itself. Did you try my solution?

[mcfmullen]

Yes. I managed to solve the problem by putting a "." in front of the variable. Rest assured, the code is validated!