unescaping double quotes in php

Question

My PHP code is:

$query="select company_name from company_names where cik=".$cik;

Which on printing gives

select company_name from company_names where cik=0001001871

I would like to get the output like

select company_name from company_names where cik='0001001871'

How do I add the single quotes in PHP?

and if cik is string type then you are doing a foolish thing of storing int as string — , Jun 18 '12 at 06:52
thing is that Ive stored integer values in array var testArray=['0001002811','0001001807','0001003344'];... Im trying to access these values with $cik... — user1371896, Jun 18 '12 at 07:01

score 5 · Accepted Answer · edited May 23 '17 at 12:09

5

Simply:

$query = "select company_name from company_names where cik = '$cik'";

Or:

$query = "select company_name from company_names where cik = '" . $cik . "'";

Notice that to prevent SQL Injection, see this:

More Info:

edited May 23 '17 at 12:09

Community

answered Jun 18 '12 at 06:50

Sarfraz

what if $cik contains McDonald's ? – thebjorn Jun 18 '12 at 06:52
1

@thebjorn: You need to ask that question on your own, this answers OP's question, `cik=0001001871`. It contains number. – Sarfraz Jun 18 '12 at 06:53
thanks for the answer... do yu know the postgres equivalent of mysql_fetch_assoc()? – user1371896 Jun 18 '12 at 07:07
@user1371896: It is `pg_fetch_assoc()` – Sarfraz Jun 18 '12 at 07:09

score 0 · Answer 2 · answered Jun 18 '12 at 06:50

0

$query="select company_name from company_names where cik='".$cik."'";

answered Jun 18 '12 at 06:50

Jebin

2 Answers2