如何在MySQL中使用'LIKE'运算符使用$ _GET的值检索查询结果

Question

I would like to query my database so that it shows me the result of the query based on my PHP's superglobal $_GET. I have tried this:

LIKE '%".$_GET["name"]."%'"

AND

LIKE '%{$_GET["name"]}%' 

However, it was in vain. Can anyone help me with this?

This is my php code:

$places = query( "SELECT * FROM places WHERE MATCH (postal_code, country_code, admin_name1, admin_code1, place_name) AGAINST (?) OR LIKE '%".$_GET["geo"]."%'", $_GET["geo"]);

The error message shows me:

Fatal error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'LIKE '%akutan%''

Answer 1

用这个

$mysql = "SELECT * FROM table WHERE input LIKE '%".mysql_real_escape_string($_GET['name'])."%' ";

Answer 2

It is not good idea to use global variable directly in your mysql query.

so, you must first assign it to some variable and use it

Like:

$getName = mysql_real_escape_string($_GET['name']);
$mysql = "SELECT * FROM places WHERE `postal_code` LIKE '%".$getName."%' ";

I hope it will help you