Re: how to use PHP variable in MYSQL query?

[Adam Mochrie]

Hey guys and gals ... here is a simple way to put any variable into a SQL statement.

Lets say you get information passed via post...

//Set the variable

$var1 = $_POST["user"];
$var2 = $_POST["password"];

// use the '%s' as a place holder and the substitute in the variables.
// You can have as many subs as you want, just make sure you list the variables
// in the order they come in the statement.
$query = sprintf("SELECT * FROM table WHERE user = '%s' AND password = '%s'",
$var1,
$var2);
// Then run the query.
$result = mysql_query($query);