MySQL Query not working with PHP Variable?

Question

Why is this working:

$sql_query = "SELECT * FROM Content WHERE id IN (1,5,7,9)";

But this isn't:

$array_values = "1,5,7,9";
$sql_query = "SELECT * FROM Content WHERE id IN ('$array_values')";

I want to select data from the database based on the integers in the $array_values string. How can I do it?

`IN (1,5,7,9)` is four integer values, however `IN ('1,5,7,9')` is one string value — Scuzzy, Apr 03 '21 at 23:32
Does this answer your question? [Querying MySQL with IN clause using PHP](https://stackoverflow.com/questions/9236460/querying-mysql-with-in-clause-using-php) — NineBerry, Apr 03 '21 at 23:32

score 1 · Accepted Answer · answered Apr 03 '21 at 23:30

1

because there are ` s in your code here

$sql_query = "SELECT * FROM Content WHERE id IN ('$array_values')";

use :

$sql_query = "SELECT * FROM Content WHERE id IN ( $array_values )";

or

$sql_query = "SELECT * FROM Content WHERE id IN (".$array_values.")";

answered Apr 03 '21 at 23:30

Alaa Mimo

Allows SQL injection attacks if the values are user input – NineBerry Apr 03 '21 at 23:33
Thanks that helped me! – HavanaSun Apr 03 '21 at 23:35
@NineBerry in my case it's not an user Input – HavanaSun Apr 03 '21 at 23:35

1 Answers1