PHP / MySQL：从登录用户输入的数据库中获取过滤数据的最佳方法是什么？

Question

I am trying to create a page that displays a preview of all the data that each individual user has put into the database. Each user must only be able to see their own data.

I have been using $SESSION's to post which logged in user is inputting what, and have tried to get my brain to think about the reverse action.

I first wondered whether I could do

SELECT * FROM input WHERE input .bodyshop_name=$_SESSION ['MM_Username']

But that did not work.

As you can probably tell, I am new to PHP/MySQL, so any help would be appreciated.

Thanks

Answer 1

if bodyshop_name is the username of the user who input that data, then a query like you said should work.

make sure $_SESSION['MM_Username'] is in single quotes when you write the query.

Answer 2

You will want to try this

$sql = "SELECT * FROM `input` WHERE `input`.`bodyshop_name`='".mysql_real_escape_string($_SESSION['MM_Username'])."'";

Note the use of mysql_real_escape_string to sanatize any unwanted data.