How to search and display 1 entry from a database

This is where you share YOUR scripts with others

Moderators: egami, macek, gesf

Post Reply
php-forum Fan User
php-forum Fan User
Posts: 974
Joined: Mon Oct 01, 2012 12:32 pm

Fri Mar 15, 2013 9:07 am

there are a few things wrong here, the first of which is that you're not using PDO for database access, ... o-examples is a quick video example of PDO in action. That said, your query is bad.
$query = "SELECT * from Members WHERE FirstName".$_POST['Value1']."'";
//stores this value into $query for when $_POST['Value1'] is Fred:
// SELECT * from Members WHERE FirstNameFred'
To fix it, just make sure you're creating a valid query. You also want to make sure to protect yourself from potential sql injection etc, and PDO makes that easier too. If you just want to fix this script without adding any extra protection, or improving your code with PDO (or even mysqli functions) then change that line to read:

Code: Select all

$query = "SELECT * from Members WHERE FirstName='" . $_POST['Value1'] . "'"; 
***edit*** apparently i can't underline in a code box, removed extra formatting tags

Post Reply