Question

Can somebody help me with this query.The page doesn’t load up whenever i run this query.I’m pretty much sure its something really simple mistake which I’m unable to figure out.Your help is much appreciated.

$aggr_nr = $_REQUEST['stck_list_nr_01'].$_REQUEST['stck_list_nr_02'].$_REQUEST['stck_list_nr_03'];
echo $aggr_nr;

$sql="SELECT v.id FROM vers_einl_aggregatnummer AS v WHERE v.aggr_nr = $aggr_nr";
$aggr_id = mysql_query($sql);

if ($aggr_id == true)
 {
        echo "query 1 executed".$aggr_id;
    else  
    {
    echo("<br />Could not execute statement ".$sql);
    }
 }

Answer 1

//sanitize the inputs 
$aggr_nr = mysql_real_escape_string($_REQUEST['stck_list_nr_01'].$_REQUEST['stck_list_nr_02'].$_REQUEST['stck_list_nr_03']);
 echo $aggr_nr;

$sql="SELECT v.id FROM vers_einl_aggregatnummer AS v WHERE v.aggr_nr = '".$aggr_nr."'";//missing Quotes
$aggr_id = mysql_query($sql);

if ($aggr_id) {
 while($result = mysql_fetch_array($aggr_id))
   echo "ID NUMBER:".$result['id'];
}  else {
   echo "<br />Could not execute statement ".$sql;
}