Using PHP variables dynamically in MySQL statements

Question

I am trying to execute the query below.

$condition = "WHERE emp_id = '$emp_id'"; 
$myquery = "SELECT * FROM emp_table".$condition;

I expect my query to be like this, but dynamically:

$myquery = "SELECT * FROM emp_table WHERE emp_id = '$emp_id'";

Is there anyway to make SQL statements dynamically through variables in php..?

first, myquery is missing a $; second, it will read ... emp_tableWHERE ...; third: what database library are you using? mysqli? PDO? What's your code? — Kenney
– Kenney, Commented Sep 19, 2015 at 15:52

KennethC · Accepted Answer · 2015-09-19 15:58:19Z

1

It should be

$condition = "WHERE emp_id = '$emp_id'"; 
$myquery = "SELECT * FROM emp_table ".$condition;

you forgot to put $ on myquery

edited Sep 19, 2015 at 15:58

answered Sep 19, 2015 at 15:53

KennethC

7563 gold badges13 silver badges27 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Elon Than · Accepted Answer · 2015-09-19 16:03:16Z

0

You should never build queries dynamically like that. Correct way to do it is to use prepared statements.

In your case it'll be like that

$statement = $pdo->prepare("SELECT * FROM emp_table WHERE emp_id = :emp_id");
$statement->execute(array(
    ':emp_id' => $emp_id
));

$rows = $statements->fetchAll(PDO::FETCH_ASSOC);

answered Sep 19, 2015 at 16:03

Elon Than

9,8154 gold badges29 silver badges37 bronze badges

3 Comments

Vilva Athiban Over a year ago

Hi elon, I dont need to include variable in WHICH clause.. My requirement is, depending on the input, the WHERE clause itself is to be included r excluded.. ex) if emp-id is blank, then it should not include the condition emp_id = $emp_id

Elon Than Over a year ago

You should include that in your question.

Vilva Athiban Over a year ago

Sorry for that, but my example stated that.. may be you dnt have a look

Community · Accepted Answer · 2017-05-23 12:30:58Z

0

Have you tried this? -

$condition = "WHERE emp_id = '" . $emp_id . "'"; 
$myquery = "SELECT * FROM emp_table " . $condition;

PHP does not expand variables within single-quote strings.

echo "$name"; //works

echo '$name'; //does not work

Take a look at this: Single quotes or double quotes for variable concatenation?

edited May 23, 2017 at 12:30

CommunityBot

11 silver badge

answered Sep 19, 2015 at 15:54

Sterex

1,0281 gold badge13 silver badges29 bronze badges

5 Comments

Vilva Athiban Over a year ago

Sterex, I tried but still its the same.. helpless :(

Sterex Over a year ago

Where are you getting the error? And what is the error?

Vilva Athiban Over a year ago

its not including the variables in SQL statement, i get error in $myquery,

Sterex Over a year ago

Hey @Multi-Coder, although I hate linking to W3Schools, here's something that will help you get started with PHP/MySQL (looks like you are VERY new to this): w3schools.com/PHP/php_mysql_select.asp Can you try using their syntax for preparing and executing your queries?

Vilva Athiban Over a year ago

hi.. thanks for ur response.. :) .. i am not new and i knew what all were there.. my problem is different.. example : i need a query = "select * from table" .. but i am spliting is as two variables.. $var1= "Select * ", $var2 = "from query". and finally, i execute my query as $myquery = $var1.$var2; .. But its not working

Collectives™ on Stack Overflow

Using PHP variables dynamically in MySQL statements

3 Answers 3

Comments

3 Comments

5 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

3 Comments

5 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related