Question

I have 2 values that I’m suppling my script – I want to search for any one of those datas. How do I write my query like this:

SELECT * FROM table WHERE id = '".$id."' or "name='".$name."';

my problem is escaping the quotes in the query.

Any help will be appreciated.

Answer 1

You may use curly brackets to avoid confusion with escaping characters as follows:

$query = "SELECT * FROM table WHERE id = '{$id}' or name = '{$name}' ";

You may also consider using wildcards such as %$letter% to search for word anywhere in the name field as:

$query = "SELECT * FROM table WHERE id = '{$id}' or name LIKE '%{$name}%' ";

SUGGESTTION:
You should always use id fields as integer for better performance.