Wrong syntax query SQL

Question

I need to select a user with a particular name:

mysql_query('select * from user where screen_name='.$userName.'');

Anyone can help me where I'm wrong?

`mysql_query("select * from user where screen_name='".$userName.'");` or better use Prepared Statement. — Abhik Chakraborty, May 25 '15 at 13:02

score 0 · Accepted Answer · answered May 25 '15 at 13:02

0

Yes wrong sql :

mysql_query('select * from user where screen_name="'.$userName.'"');

answered May 25 '15 at 13:02

chandresh_cool

score 0 · Answer 2 · answered May 25 '15 at 13:04

0

mysql_query("select * from user where screen_name = '".$userName."';");

Better (in my mind)

$sql = "SELECT * FROM `user` WHERE `screen_name` = '".$userName."';";
mysql_query($sql);

Even better - use mysqli....

answered May 25 '15 at 13:04

foxbeefly

score -1 · Answer 3 · answered May 25 '15 at 13:01

-1

mysql_query("select * from user where screen_name='$userName'");

try that.....

answered May 25 '15 at 13:01

Sam Teng Wong

3 Answers3