php special characters help

[clinton_pillay]

Hi experts. 

I am received a GET variable into a page which is a id with a value as uuid:3242_2323_4444_9909_433/child_repeat[1]. Which is being used in my mysql query. 

So my query will be SELECT * from table_1 WHERE id = $id.  

However php is treating this string differently, my query fails, it says that it has a error near :3242_2323_4444_9909_433/child_repeat[1]. 

So it seems that its interpreting the colon as something else and removing the text before the colon. 

[ginerjm]

Probably need quotes around the value.

Of course, the proper way to write your query is to NOT use the * but rather specify the column names (fields) that you want to retrieve.

	$q = "select * from table_1 where id='$id'";
	

Edited October 14, 2019 by ginerjm