在SQL字符串中使用$变量？

Question

I would like to be able to select a category from a dropdown and depending on the category it will add it to whatever SQL table is it equal with.

<?php

$article = $_POST['article'];

$con = mysql_connect("******","******","*******");
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("jstaltso_staltsoft", $con);

$sql="INSERT INTO $article (headline, content)
VALUES ('$_POST[headline]', '$_POST[content]')";

if (!mysql_query($sql,$con))
  {
  die('Error: ' . mysql_error());
  }
echo "Content Added!";
echo "<br/>";
echo "<a href='articles.php'><- Back</a>";

mysql_close($con)

?>

I want the variable $articles to be in the place of where you out the name of the table.

$sql="INSERT INTO $article (headline, content)
VALUES ('$_POST[headline]', '$_POST[content]')";

So whatever I choose in the dropdown, it will put it at $articles.

Answer 1

Try:

"INSERT INTO `{$article}` ...."

Don't forget to sanitize your input! (mysql_real_escape_string, for starters)