使用带有会话数据的where子句的php登录表单

Question

I have created a login form that works, so the next step is to return data relative to the user that has logged in rather than the entire table. I am using a php session to parse the username from one file to another. I can echo this value without a problem, however when I try to use it in the following statement, unexpected T_STRING error is thrown. How do I parse the variable correctly.

$query = 'SELECT * FROM table WHERE table.username = $_SESSION['user']';

Answer 1

Try this...

$query = 'SELECT * FROM table WHERE table.username = "' . $_SESSION['user'] . '"';