MySQL查询php变量中的变量？

Question

I have a PHP function that makes a query to MySQL DB.

function regEvent($event, $l)
{
$sqlz_upd="UPDATE {$event} SET f1a='$_POST[F1A"'.$l.'"]'";

The question is what is the syntax to use variable $l in $_POST[F1A$l]?

Answer 1

$condition = $_POST["F1A" . $l];
$sqlz_upd="UPDATE {$event} SET f1a='".mysql_real_escape_string($condition)."'";

This is how to use your dynamic post and be safe for Sql Injection.

Answer 2

Here you go:

$var = mysql_real_escape_string($_POST["F1A".$l]);
$sqlz_upd="UPDATE {$event} SET f1a='$var' ";

Answer 3

if you are using a string as key in an associative array. It should be enclosed in single or double quotes(though PHP won't give any error).

ie $_POST['F1A'. $l] or $_POST["F1A$l"] $_POST['F1A'. $l] or $_POST["F1A$l"]

my suggestion will be...

$sqlz_upd="UPDATE {$event} SET f1a='" . $_POST["F1A$l"] . "'";