SQL query not returning any results when it should

Question

I have an sql query in my php script that has this line in it:

WHERE beerStyle = \"$styleName\" AND rating > 0

The style name that is being looked up is:

Fresh "Wet" Hop Ale

Which is being stored exactly has written above in my database. My problem is I think somehow the quotes are getting mixed up when it looks in the DB, so it thinks there are now styles with that name.

[Double quotes are the wrong quotes to use here](http://stackoverflow.com/questions/1992314/what-is-the-difference-between-single-and-double-quotes-in-sql). — user229044, Oct 11 '13 at 01:36
This does not answer your question, but just be careful: this code has a sql injection flaw. — Juliano, Oct 11 '13 at 01:51

score 0 · Answer 1 · answered Oct 11 '13 at 01:40

0

Make use of mysqli_real_escape_string()

$styleName=mysqli_real_escape_string($styleName);

and your query goes like.

WHERE beerStyle = $styleName AND rating > 0

answered Oct 11 '13 at 01:40

Shankar Narayana Damodaran

68,075
43
96
126

score 0 · Answer 2 · answered Oct 11 '13 at 01:50

0

Perhaps you may try

$query = "SELECT * FROM beers WHERE beerStyle = '" .$styleName. "'";

answered Oct 11 '13 at 01:50

SQL query not returning any results when it should

2 Answers2