mysql and $_GET

[Backspace]

i cant get it to work if i try to use $_GET. heres the code that does.

$query = 'SELECT * FROM codes WHERE code = \'code_data\'';


now when i tried

$query = 'SELECT * FROM codes WHERE code = '.addslashes($_GET['code'])'';

it says that it cannot find that row.

[fenway]

It looks like the quoting is all wrong for the second query -- what the query look like when you echo it in PHP?

[Backspace]

This is what it echos as the mysql error.

Query failed: Unknown column 'something' in 'where clause'

[wickning1]

Is magic_quotes on? If so, the addslashes() will mess up your query.

Use get_magic_quotes_gpc() to find out if they are turned on.

[jworisek]

shouldn't it look like below with the trailing period ?

[code]
$query = 'SELECT * FROM codes WHERE code = '.addslashes($_GET['code']).'';
[/code]

[fenway]

Not sure why you're concatenating an empty string -- does it work without the addslashes()?

[Backspace]

I turned off magic quotes and tried that, it dident work. and withought the addslashes it still gives the same error

Query failed: Unknown column 'something' in 'where clause'

is there anyway to get it to look like the one that did work
\'code_data\''

i also tried to use $str = $_GET['code'] and it used $str as the name lol.

also it works with just $_GET when i add this into the URL

[a href=\"http://localhost/codelist.php?code='pso'\" target=\"_blank\"]http://localhost/codelist.php?code='code'[/a]

the ' ', is there syntax for this so i can place into that code without error.

edit: nm i got it to work by adding that into the url thanks.