Need some help with writing a query

[jim.davidson]

I'm trying to make a query from user input and I'm not sure how to put the variable in the query.  Here's an example

 

$_SESSION['email_query']  contains community = 'on'

 

  mysql_select_db($database_mine, $mine);

$query_listEmail = "SELECT needs_id, email_id, status, name, email FROM needs ORDER BY email_id DESC WHERE $_SESSION['email_query']";

$ListEmail = mysql_query($query_listEmail, $mine) or die(mysql_error());

 

I'm pretty sure I need something like single or double quotes around $_SESSION['email_query'] in the where claus

 

I will be greatfull for any help

 

[Stalingrad]

Try setting the session as a variable first... that's the first thing I can think of.

[Kevin.Arvixe]

$email_query = mysql_real_escape_string($_SESSION['email_query'];

 

SELECT needs_id, email_id, status, name, email FROM needs WHERE email_query =  " . $email_query . " ORDER BY email_id DESC"

 

1. Whenever you use a WHERE clause, it has to be comparitive. So the variable has to be compared to a row in the database.

2. mysql_real_escape_string(); -- Please be nice to your server admins...

 

[jim.davidson]

Ok,

When I put the session variable to a variable and change the order of my query to put the where clause before the order by clause it works.

 

Thanks for the suggestions