Question

I have a database with the following structure:

id  msg
1  'Hello'
2  'Bye'

and I need to get “msg” value for the “id”.

This is my try:

$text = mysql_query("SELECT msg FROM text WHERE text (id) ='$msg_num'");

But it doesn’t work 🙁
Do you have suggestions?
Thanks

Answer 1

remove text

$result = mysql_query("SELECT msg FROM text WHERE id ='$msg_num'");
while ($row = mysql_fetch_array($result)) 
{
    $text = $row['msg'];  
}

your code is vulnerable with SQL Injection Please read the article below,

How can I prevent SQL injection in PHP?