Insert url value in mysql query

Question

I'm using the following string to get items from my database:

mysql_query("SELECT * FROM tracking WHERE track_id = '123' ");

I want to get the 123 from the url using a process similar to echo $_GET['id']; so when the url is "http://example.com/?id=456" the string will apear as below:

mysql_query("SELECT * FROM tracking WHERE track_id = '456' ");

Any help would be greatly appreciated.

Before you actually use any of the suggested solutions, please read [How can I prevent SQL injection in PHP?](http://stackoverflow.com/q/60174/53114) as none of them addressed it. — Gumbo, Jan 19 '14 at 11:23
Don't use mysql queries, they are deprecated. Use mysqli instead — zurfyx, Jan 19 '14 at 11:23

score 0 · Accepted Answer · answered Jan 19 '14 at 11:15

0

As you already proposed...

mysql_query("SELECT * FROM tracking WHERE track_id = '<?php echo $_GET['id']; ?>' ");

or (since you are probably already in php)...

mysql_query("SELECT * FROM tracking WHERE track_id = '" . $_GET['id'] . "' ");

answered Jan 19 '14 at 11:15

Aggelos Synadakis

455
4
13

wow, didn't think it was that simple, well don't I look like a huge idiot lol... Thank you soo much for your help! – user3040416 Jan 19 '14 at 11:19
1

I'd sanitize the input before doing the search though @user3040416 – zurfyx Jan 19 '14 at 11:20

score 0 · Answer 2 · answered Jan 19 '14 at 11:18

0

Try this one mysql_query("SELECT * FROM tracking WHERE track_id = '".$_GET['id']."' ");

answered Jan 19 '14 at 11:18

Jaskaran singh Rajal

2,270
2
17
29

score 0 · Answer 3 · answered Jan 19 '14 at 11:20

0

mysql_query("SELECT * FROM tracking WHERE track_id = '".$_GET['id']."' ");

answered Jan 19 '14 at 11:20

Ahmad Hussain

2,443
20
27

score 0 · Answer 4 · answered Jan 19 '14 at 11:26

That'd be a possible approach.
Remember that mysql functions are deprecated (use mysqli instead) and don't forget to sanitize your input.

$id = $_GET['id'];
$id = mysqli_real_escape_string($id);

mysqli_query($db,"SELECT * FROM tracking WHERE track_id = '".$id."' ");

Insert url value in mysql query

4 Answers4