How to Parameterise SQL Query in PHP

[Damien O'Sullivan]

The below code is working based on the WHERE clause.

Now, rather than specify the Gender, State, etc. I want to enter Female and the State name into textboxes, and then query the database based on those values.

How do I parameterise the below code?

function select()
{

echo "The select function is called.";
$connect = mysql_connect("localhost","root","cft108");

if (!$connect) {
die("MySQL could not connect!");
}

$DB = mysql_select_db('g05');

if(!$DB) {
die("MySQL could not select Database!");
}

$ward_list = mysql_query("SELECT DISTINCT (((Deaths / Population) * 100) * 1000) * 1.12 as 'myResult', Population FROM Mortality WHERE Gender = 'Female' AND State = 'Alabama' AND Age_Group = '1-4 years'");

while ($row = mysql_fetch_array($ward_list)){
echo '<br>';
echo 'Premium:' . '<option value="'. $row['value'] .'">'. $row['myResult'] .'</option>';
}
}


Thanks a lot.