douzhu6149 2017-07-03 20:38
浏览 72
已采纳

mysql_query WHERE`id` ='$ user'&&'$ post'

so I have a mysql query that looks like this.

$copy = mysql_query("SELECT `id` FROM `brain` WHERE `id` = '$user_screen_name' && '$posts['title']'");

I want the query to search for the id that is in the table where screen name and post title strings are matched and put the found id in a variable. How would I do this?

  • 写回答

1条回答 默认 最新

  • dtvpe4837413 2017-07-03 20:46
    关注

    First, some warnings:

    Please stop using mysql_* functions. These extensions have been removed in PHP 7. Learn about prepared statements for PDO and MySQLi and consider using PDO, it's really pretty easy.

    Little Bobby says your script is at risk for SQL Injection Attacks.. Even escaping the string is not safe!


    To fix your query you need a separate AND condition for each item you want to filter against:

    WHERE `id` = '$user_screen_name' 
    AND `title` = '$posts["title"]'
    

    Without seeing your table layout it would be hard to go much further but if you want the id in a variable you would do this after the query:

    $row = mysql_fetch_array($copy);
    

    Once done, $row['id'] will be the variable containing the id.

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?

悬赏问题

  • ¥15 smptlib使用465端口发送邮件失败
  • ¥200 总是报错,能帮助用python实现程序实现高斯正反算吗?有偿
  • ¥15 对于squad数据集的基于bert模型的微调
  • ¥15 为什么我运行这个网络会出现以下报错?CRNN神经网络
  • ¥20 steam下载游戏占用内存
  • ¥15 CST保存项目时失败
  • ¥15 树莓派5怎么用camera module 3啊
  • ¥20 java在应用程序里获取不到扬声器设备
  • ¥15 echarts动画效果的问题,请帮我添加一个动画。不要机器人回答。
  • ¥15 Attention is all you need 的代码运行