Can a PHP variable be used as a table name in an SQL query? [duplicate]

Question

I have a variable $table which will hold the value of the user input I want to use the variable $table in my sql statement after the FROM.

Ex:

Select * FROM $table;

I want to know if its possible how I have written it.

Atul Stha · Accepted Answer · 2018-04-08 10:35:43Z

0

It is possible but a very bad practice and the way of doing it is different.

answered Apr 8, 2018 at 10:35

Atul Stha

1,5348 gold badges27 silver badges50 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

$dbquerystring = "Select * FROM ".$table;