Select Where And after $

Question

Does anyone know how can I use AND in this case?

$selected="SELECT * FROM Table WHERE t2 = '".$value1."' AND t1 <> '".$value1."' AND t1<> '".$value3."'";

Thanks.

What problem are you having with your query? Another option is to use `not in`... — sgeddes, Oct 15 '16 at 03:41
Nothing looks wrong. Try printing out your actual sql and then it may be more obvious. Could you have single quotes in your values? Maybe you should try using parameterized queries instead. — sgeddes, Oct 15 '16 at 04:05
This should help: http://stackoverflow.com/questions/60174/how-can-i-prevent-sql-injection-in-php — sgeddes, Oct 15 '16 at 04:17
Describe what happens with you current query. Maybe the second `$value1` should be `$value2`, we can only guess at this point. Also this is too minimal of a PHP version if this is a PHP issue... — chris85, Oct 15 '16 at 04:19

score 0 · Answer 1 · answered Oct 15 '16 at 03:55

0

$selected="SELECT * FROM Table WHERE t2 = '".$value1."' AND t1 <> '".$value1."' AND t1 <> '".$value3."'";

just provide space.

Or you can use NOT IN

$selected="SELECT * FROM Table WHERE t2 = '".$value1."' AND t1 not in ('".$value1."','".$value3."')";

answered Oct 15 '16 at 03:55

Yash Mehta

Still does not work. The problem is about `'".$value1."'`, so after this AND does not work. This is the only problem actually. – Efe Albayrak Oct 15 '16 at 04:02
What is the data type of $value1? – Yash Mehta Oct 15 '16 at 04:06
all values are strings. – Efe Albayrak Oct 15 '16 at 04:13
then possibly `$value1` could contain ' or " ? Please post the error and output. – Yash Mehta Oct 15 '16 at 04:23
Perhaps a sample of actual data and the $value string and the result you think you should get .... – kerry Oct 15 '16 at 07:02

1 Answers1