+- CodeIgniter Forums (https://forum.codeigniter.com)
+-- Forum: Archived Discussions (https://forum.codeigniter.com/forumdisplay.php?fid=20)
+--- Forum: Archived General Discussion (https://forum.codeigniter.com/forumdisplay.php?fid=21)
+--- Thread: Variable in a SQL Query (/showthread.php?tid=38537)
Variable in a SQL Query - El Forum - 02-10-2011
[eluser]invision[/eluser]
Hi,
I'm using the following code to select data from my database:
Code:
$this->db->query("SELECT entry.id, city.*, country.* FROM entry, city WHERE city.country = {$country}");This query outputs as:
Quote:SELECT entry.id, city.*, country.* FROM entry, city WHERE city.country = gbrbut I need it as:
Quote:SELECT entry.id, city.*, country.* FROM entry, city WHERE city.country = 'gbr'
How do I change the query to treat gbr[b] as [b]'gbr'(a string)?
Variable in a SQL Query - El Forum - 02-10-2011
[eluser]JHackamack[/eluser]
why not use:
Code:
$this->db->query("SELECT entry.id, city.*, country.* FROM entry, city WHERE city.country = '{$country}'");Variable in a SQL Query - El Forum - 02-10-2011
[eluser]invision[/eluser]
Thanks for the reply. I'm sure I tried this before and it failed, but I'll give it a shot
Variable in a SQL Query - El Forum - 02-10-2011
[eluser]Rick Jolly[/eluser]
Always make sure your values are escaped. Query bindings do that for you and it's cleaner:
Code:
$this->db->query('SELECT entry.id, city.*, country.* FROM entry, city WHERE city.country = ?', array($country));