Re: Problem with SELECT

Mark wrote: 
Hello

new to php, and a problem:

$sContentId = $_GET["sContentId"];

$db = mysql_connect("mysql.xxx.nl","xxx","xxx") or die ("Error");

mysql_select_db("keyone", $db);

// here is goes wrong
$sql2 = "SELECT * FROM sContentTbl WHERE sContentId=$sContentId";

echo $sql2."<br>";
$producten = mysql_query($sql2);
mysql_close($db);

I do only want the (1) item out of the sContenTbl where the value is specified bij $sContentId. But i do get this:

SELECT * FROM sContentTbl WHERE sContentId=\'6\'

If i choose to do it like this (test):

$sql2 = "SELECT * FROM sContentTbl WHERE sContentId=6";

then it works fine.

So what do i do wrong?

Before using $_GET['sContentId'] in the query, ensure that it is an integer value without any quotes.

functions to help:
is_numeric
intval

if you need to find the number within the variable string value and of these can help:
str_replace
substr
strpos
preg_match
preg_replace

--
Justin Koivisto, ZCE - justin@xxxxxxxxx
http://koivi.com
.