[SOLVED] PHP query question

[182x]

Hey guys,

 

When creating queries in PHP for example:

 

$test="SELECT test FROM test WHERE testId = $testId";

 

Should there be single quotes round any part of the query? It works fine as it is, I just want to be sure I am writing my code to the proper standard. Thanks.

[pocobueno1388]

Here is a more proper way.

 

$test = "SELECT `test` FROM `test` WHERE `testId` = '$testId'";

[trq]

Non integer type values should be surrounded in quotes. So for example, if fld was of type VARCHAR your query might look like...

 

SELECT fld FROM tbl WHERE fld = 'foo'

[trq]

Here is a more proper way.

 

$test = "SELECT `test` FROM `test` WHERE `testId` = '$testId'";

 

Backticks should only be used to escape reserved words. There is simply no need for them otherwise.

[182x]

What if a field is of type VARCHAR but the value entered into it is a integer does it need the quotes?

[trq]

What if a field is of type VARCHAR but the value entered into it is a integer does it need the quotes?

 

Yes.

[182x]

Thank you