Ignore mysql_query SELECT

Question

I'm using fopen and fwrite to create a new php file, but it's returning an error at the line of a query, specifically on SELECT:

<?php
# set $defaultDir, $fileName and $userID

$fileContent = "<?php
\$getBlogPostQ = mysql_query("SELECT name FROM posts WHERE id_users='".\$userID."' LIMIT 1");
?>";

$createFile = fopen($defaultDir . "/" . $fileName . ".php","a");
fwrite($createFile,$fileContent);
fclose($createFile);

?>

I know that the backslash escape the variable, but how can i avoid the execution of the "SELECT" to write it at the file.

Thanks!

Answer 1

只需使用如下单引号：

$fileContent = '<?php $getBlogPostQ = mysql_query("SELECT name FROM posts WHERE id_users=\'' . $userID . '\' LIMIT 1"); ?>';

Answer 2

Just add backslash to escape double quotes too.

$fileContent = "<?php
\$getBlogPostQ = mysql_query(\"SELECT name FROM posts WHERE id_users='\".\$userID.\"' LIMIT 1\");
?>";

Answer 3

I use this technique more and more now, maybe you will like that too:

$fileContent = <<<ANYTHINGYOUWANT
<?php
 $getBlogPostQ = mysql_query("SELECT name FROM posts WHERE id_users='".$userID."' LIMIT 1");
?>
ANYTHINGYOUWANT;