how to retrieve data randomly and limit in android php file

Question

I want to retrieve data from my table. Data should come at random and in limit.

The following code limits data:

$sql = "SELECT * FROM `products` ORDER BY id LIMIT ".$_GET["start"]." , ".$_GET["end"].";";

However, I want it random, how should I do it?

Assuming the user of your script can pass arbitrary strings via the start and end variable, your code is dangerously vulnerable by SQL injections: en.wikipedia.org/wiki/SQL_injection — chtz
– chtz, Commented Oct 9, 2016 at 14:56

Abolarin stephen · Accepted Answer · 2016-10-09 15:28:18Z

0

Try doing this:

Create a function that cleans user input:

function cleanInput($input) {
  $input= trim($input);
  $input= strip_tags($input);
  $input= htmlspecialchars($input);
  return $input;
}

Then do the query:

$start  = cleanInput($_GET['start']);
$end    = cleanInput($_GET['end']);

//Using prepared statements
$sql= "SELECT * FROM `products` 
       ORDER BY rand() 
       LIMIT ?,?";

$stmt=  $conn->prepare($sql);


$row= $stmt->execute([$start,$end]);

That should do it

answered Oct 9, 2016 at 15:28

Abolarin stephen

3582 silver badges9 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

how to retrieve data randomly and limit in android php file

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related