Re: How to escape SQL thinking a variable is a table?

[Felix Geerinckx]

kamen.kozarev wrote:

> $name = $result["name"]; (name is something like m42ix_im26May2004.003575)
>
> $data2 = mysql_query("select * from band_ref where name = $name");
>
> and the error I get is "Invalid query: Unknown table 'm42ix_im26May2004' in where clause"


$data2 = mysql_query("select * from band_ref where name = '$name'");
(note the single quotes around $name)

--
felix
Please use BBCode to format your messages in this forum.