Question

What’s the correct way to code the following

SELECT * FROM table WHERE value = $row['item']

$row['item'] echos correctly, but does not seem to work in the mysql query. Been having this problem for a few days. I’ve tried .$row['item']. and a few other variations but I must be doing something wrong.

Answer 1

The better more appropriate approach is to use mysqli and prepared statements ie:

$stmt = $mysqli->prepare("SELECT * FROM table WHERE value =?");
$stmt->bind_param("s",$row['item']);  // I am assuming row['item'] is a string
$stmt->execute();

If you can’t use mysqli or absolutely refuse to you can use this:

$query = "SELECT * FROM table WHERE value = '".mysql_real_escape_string($row['item'])."'";