Re: SQL Query Question

[Baris Cicek]

Well first of all you should put those variables into quotes like:
$result = @mysql_query("SELECT MovieTitle, ReleaseDate, Gross FROM movie_table, actor_movie_table, actor_table WHERE actor_table.ActorID='".$id."' AND actor_movie_table.ActorID = actor_movie_table.MovieID ORDER BY `".$sOrderBy."` '.$ad.'');

I have no idea what $ad is. But putting queries like this is a major security problem and leads to sql injection. Put tables names into ` ` and values into ' ' for your safety.

Btw, I don't see a problem for "Actor_movie_table.ActorID = actor_movie_table.MovieID" actually.