Using $_GET with multiple parameters in URL

Question

So I have the url:

php?id=1

and I currently use

$id = $_GET['id'];

$tPerson_SQLselect = "SELECT FROM jobList WHERE id = '$id'"

And this works fine.

However I am unsure what do when I have the url:

php?id=1,2

and I want to get and then filter for id= 1 and 2

Many thanks

**You are wide open to [SQL injections](http://stackoverflow.com/q/60174)** — John Conde, Dec 30 '14 at 15:40
`SELECT FROM jobList` - Um... select what? *"And this works fine."* - Oh?! — Funk Forty Niner, Dec 30 '14 at 15:46

score 1 · Accepted Answer · answered Dec 30 '14 at 15:45

1

Can try using explode() & implode(). Also use IN in query string. Example:

$ids = "'" . implode("','", array_filter(explode(',', $_GET['id']))) . "'";
$tPerson_SQLselect = "SELECT * FROM jobList WHERE id IN(".$ids.")";

answered Dec 30 '14 at 15:45

MH2K9

score 0 · Answer 2 · edited May 23 '17 at 10:26

0

If you have something like php?id=1&id=2, you can use id[] as key. Check here

edited May 23 '17 at 10:26

Community

answered Dec 30 '14 at 15:40

Bestasttung

2 Answers2