Re: Usng Session Vaiable in WHERE Statement
| From: | Torsten Roehr | Date: | Mon, 26 Jul 2004 12:06:58 +0000 |
| Subject: | Re: Usng Session Vaiable in WHERE Statement | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-191878@lists.php.net to get a copy of this message | ||
"Harlequin" <michael.mason@arraspeople.co.uk> wrote in message
news:20040726115856.1240.qmail@pb1.pair.com...
> Could someone please help me with my syntax here...?
>
> $MembersDataQry = "SELECT * FROM MembersData
> WHERE UserID='$_SESSION['logname']'";
>
> I get an error on line 2 but can't seem to figure out what I've missed.
>
> The variable echoes fine so I know there's a string in there.
>
To use array values within double quotes you have to put curly braces around
them:
$MembersDataQry = "SELECT * FROM MembersData WHERE
UserID='{$_SESSION['logname']}'";
Or concatenate the string:
$MembersDataQry = "SELECT * FROM MembersData WHERE UserID='" .
$_SESSION['logname'] . "'";
Remember to apply mysql_real_escape_string() on any values used within a
query.
Regards,
Torsten Roehr