MySQL - Get a value from column through ID in PHP

Question

I have a database with the following structure:

id  msg
1  'Hello'
2  'Bye'

and I need to get "msg" value for the "id".

This is my try:

$text = mysql_query("SELECT msg FROM text WHERE text (id) ='$msg_num'");

But it doesn't work :( Do you have suggestions? Thanks

score 9 · Accepted Answer · edited May 23 '17 at 12:33

9

remove text

$result = mysql_query("SELECT msg FROM text WHERE id ='$msg_num'");
while ($row = mysql_fetch_array($result)) 
{
    $text = $row['msg'];  
}

your code is vulnerable with SQL Injection Please read the article below,

edited May 23 '17 at 12:33

Community

answered Oct 21 '12 at 17:18

John Woo

`mysql_query` returns a resource and not the text of `msg`. You need to fetch if you want the text value. – Al_ Oct 21 '12 at 17:24

score 3 · Answer 2 · edited May 23 '17 at 12:08

3

Change

mysql_query("SELECT msg FROM text WHERE text (id) ='$msg_num'");

To

mysql_query("SELECT msg FROM text WHERE id ='$msg_num'");

This type of query can be cause of MySQL Injection attacks.. so good to use to stop for 1st order injection using prepared statements.

1) Mysqli

2) PDO

edited May 23 '17 at 12:08

Community

answered Oct 21 '12 at 17:17

GBD

thanks. I get something like "Resource id #15" and I need the value inside. Suggestions? – slwr Oct 21 '12 at 17:18
you need to use mysql_fetch_array() to get data from Resource – GBD Oct 21 '12 at 17:20
use the mysql_fetch_array($result) – NullPoiиteя Oct 21 '12 at 17:20

cerealy · Answer 3 · 2012-10-21T17:36:14.307

2

select id from text where id = '$msg_num'

The difference in this query is that it selects the column. There are no column named 'msg', thats the value.

edit: Sorry, read the table wrong (sideways).

edited Oct 21 '12 at 17:36

answered Oct 21 '12 at 17:17

cerealy

score 1 · Answer 4 · answered Oct 21 '12 at 17:17

1

Bad syntax.

$text = mysql_query("SELECT msg FROM text WHERE text (id) ='$msg_num'");

Should be:

$text = mysql_query("SELECT msg FROM text WHERE id='$msg_num'");

You can use mysql_error() to diagnose things like this.

answered Oct 21 '12 at 17:17

nyson

score 1 · Answer 5 · answered Oct 21 '12 at 17:17

1

$text = mysql_query("SELECT msg FROM text WHERE id ='$msg_num'") or die(mysql_error());

answered Oct 21 '12 at 17:17

nickhar

5 Answers5