Display First & Last Name as a result in a php file format using the unique phone number from my database

Question

I have created a table 'details'-

FNAME-First name
LNAME-Last name
PHONE- Phone number
BIRTHDAY- Birthday

I have a html file with form,login.html-

<form action="check.php" method="post">
<input type="text" name="phone">
<input type="submit" value="login"></form>

I have php file checking this with mysql database,check.php

<? $PHONE=$_POST['phone']
mysql_connect//My db details here
$query=SELECT FNAME,LNAME FROM 'details' WHERE PHONE='$PHONE' ?>

But the above php code shows error,I think i'm going wrong somewhere, any one can help? Thanks in advance.

where are "" or '' in $query? Check mysql_connect function in php.net there is red box read it! What about XSS? — Robert, Jun 21 '13 at 07:53
I know that "" or " in $query is neccessary ,In my actual code file of project I have mentioned it. — Ashia Tupe, Jun 21 '13 at 08:03
Well, post your actual code then!! And also post what error your get. Please read [this](http://stackoverflow.com/help/how-to-ask) carefully before asking your next question. — Mischa, Jun 21 '13 at 08:04
In your "actual" code you also put a `;` after `$PHONE=$_POST['phone']`? If not, put one. — Mischa, Jun 21 '13 at 08:08

score 2 · Answer 1 · edited May 25 '19 at 14:22

2

You giving an incorrect quotes to table name (change single quotes to backticks `),

$query = "SELECT FNAME,LNAME FROM `details` WHERE PHONE='$PHONE'";

Note: Please, don't use mysql_* functions in new code. They are no longer maintained and are officially deprecated. See the red box? Learn about prepared statements instead, and use PDO, or MySQLi - this article will help you decide which. If you choose PDO, here is a good tutorial.

edited May 25 '19 at 14:22

Zoe

answered Jun 21 '13 at 07:52

Rikesh

The bigger problem is the query isn't encapsulated. – Burhan Khalid Jun 21 '13 at 07:53
Judging from the question he has no clue what your "note" means. Better recommend a tutorial for absolute beginners to programming. – Mischa Jun 21 '13 at 08:00
I'm new to this,,what are you saying about query I didn't understand.pls help – Ashia Tupe Jun 21 '13 at 08:08
@AshiaTupe - What you don't understand ? About your issue or a note ? – Rikesh Jun 21 '13 at 08:09
It is giving an unknow T_STRING error :-( – Ashia Tupe Jun 21 '13 at 08:14
Wait i will post my actual code.to solve my error. – Ashia Tupe Jun 21 '13 at 08:16
You must be missing something..You need to [pastebin](http://pastebin.com/) your code, so that we can have a look. – Rikesh Jun 21 '13 at 08:16

1 Answers1