SELECT error querying

Question

What could be wrong with this line:

'$query = "SELECT * FROM messages WHERE (rlat => '".$latmin."' AND rlat <= '".$latmax."')      AND (rlon >= '".$lonmin."' AND rlon <= '".$lonmax."')";'

Error: Error in query: SELECT * FROM messages WHERE (r_lat => '55.4655951769' AND r_lat <= '55.496987423') AND (r_lon >= '25.5338700398' AND r_lon <= '25.5989507602'). You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '=> '55.4655951769' AND r_lat <= '55.496987423') AND (r_lon >= '25.5338700398' AN' at line 1...

Thanks!

Do be sure you're [properly escaping everything](http://bobby-tables.com/php). Using string concatenation is a recipe for disaster. — tadman, Jul 12 '13 at 17:55

score 3 · Answer 1 · edited May 23 '17 at 10:25

=> isn't a known operator. If you want the greater than or equal comparison operator, then you are after >=.

Incidentally, you might find that your query can be written more concisely with the BETWEEN ... AND ... operator:

SELECT *
FROM   messages
WHERE  rlat BETWEEN $latmin AND $latmax
   AND rlon BETWEEN $lonmin AND $lonmax

You should also investigate passing variables into your SQL by way of parameters to prepared statements.

SELECT error querying

1 Answers1