简单查询中的MySQL语法错误

Question

I have this little bit of code here and I am totally lost as I am getting a syntax error near 'unique = 'dD0231q' LIMIT 1' at line 1. It might be something very simple, but I seem to be blind to my own errors..

 $unique = $_GET["unique"];
 $results = $mysqli->query("SELECT * FROM written WHERE unique = '$unique' LIMIT 1

Answer 1

UNIQUE is a keyword in MySQL. If you want to use it as a table column name please wrap it in ` (backtick) quotes like this:

SELECT * FROM written WHERE `unique` = '$unique' LIMIT 1

Also please don't just put values you recieve from a user directly into your query. That's how SQL injections happen. Rather use Prepared Statements.