variable in query

[Kanuski2]

I did some php coding a few years ago and am trying to start again but the rules have changed. 

I did this query:

$sql = "SELECT * FROM book WHERE solution='HIN ORDER BY id";

It works great.

Then $item="HIN";

$sql = "SELECT * FROM book WHERE solution=$item ORDER BY id";

and I get no results. What gives?

[Kanuski2]

Forgot an apostrophe, solution='HIN'

[Barand]

$item still requires the quotes around it, just like HIN did.

 

PS Instead of putting variables in the query, you should use prepared queries with placeholders for the values

$item = "HIN";

$stmt = $pdo->prepare("SELECT * FROM book WHERE solution=? ORDER BY id");
$stmt->execute( [ $item ] );

 

Edited October 5, 2021 by Barand

[Kanuski2]

Awesome. Greatly appreciated.