Fetch data from mysql table using where clause

Question

I have categories in table I want to select data where category is Sales I am using following query

$query = mysql_query("SELECT * FROM catalog_Master where category=@"Sales"");

`mysql_*` functions is from PHP5.5 DEPRECATED - use PDO [link](http://www.php.net/manual/en/ref.pdo-mysql.php) — ryder, Mar 01 '13 at 08:21

score 1 · Answer 1 · edited May 23 '17 at 12:27

1

Wrap it with single quotes because it is a string.

$query = mysql_query("SELECT * FROM catalog_Master where category='Sales'");

based on your comment, if you want the value from a variable,

$category="Sales";
$query = mysql_query("SELECT * FROM catalog_Master where category='$category'");

As a sidenote, the query is vulnerable with SQL Injection if the value(s) of the variables came from the outside. Please take a look at the article below to learn how to prevent from it. By using PreparedStatements you can get rid of using single quotes around values.

How to prevent SQL injection in PHP?

edited May 23 '17 at 12:27

Community

1
1

answered Mar 01 '13 at 08:15

John Woo

258,903
69
498
492

if i want to give this in var then how can give this like $category="Sales" like this or not – Shakeel Ahmed Mar 01 '13 at 08:19
how to call this page using url lie mypage.com/catalog.php?category=? like this if i want to post category – Shakeel Ahmed Mar 01 '13 at 08:26
1

`$category=$_GET["category"]` will return "sales" if your url is "http:// mypage.com/catalog.php?category=sales" – Voitcus Mar 01 '13 at 08:28
+1 for mentioning PDO, SQL injection. Nice answer! – ppeterka Mar 01 '13 at 09:02

score 0 · Answer 2 · answered Mar 01 '13 at 08:16

0

be careful with the double quotes, also if it's an exact match:

$query = mysql_query("SELECT * FROM catalog_Master where category='Sales'");

This should work

answered Mar 01 '13 at 08:16

Naryl

1,878
1
10
12

Kevin G Flynn · Accepted Answer · 2013-03-01T09:51:57.537

0

<?PHP
$query = mysql_query("SELECT * FROM catalog_Master WHERE category='Sales'");
?>
**EDIT**

**PHP 5.5 way**

$mysqli = new mysqli("localhost", "db_user", "db_password", "db_name");
$result = $mysqli->query("SELECT * FROM catalog_Master WHERE category='Sales'");

edited Mar 01 '13 at 09:51

answered Mar 01 '13 at 08:22

Kevin G Flynn

231
4
14

1

Please add explanation. An Answer wothout explanation is barely an answer. Also: mysql_* is deprecated as of PHP 5.5. – ppeterka Mar 01 '13 at 09:00
how is this different from my answer? `:D` – John Woo Mar 01 '13 at 09:10
I have update explanation please check it. – Kevin G Flynn Mar 01 '13 at 09:52
I still don't see explanation... However, at least the mysqli_is there. – ppeterka Mar 01 '13 at 10:22

Fetch data from mysql table using where clause

3 Answers3