How to use php var as same as column name in php mysql?

Question

How to use php var as same as column name in php mysql ?

When access to this site

www.example.com/test.php?column=member_no&id=5

I will get $_GET['column'] = member_no and $_GET['id'] = 5

Then when i test below code why data not update ?

$sql = "UPDATE table SET '".mysql_real_escape_string($_GET['column'])."' = '0' WHERE id = '".mysql_real_escape_string($_GET['id'])."' ";
$dbQuery = mysql_query($sql);  

Answer 1

Use of Mysql Field name in PHP has its own convention, you can't use ' for a filed name, You need to use ` or left blank.

$sql = "UPDATE table SET `".mysql_real_escape_string($_GET['column'])."` = '0' WHERE id = '".mysql_real_escape_string($_GET['id'])."'";
$dbQuery = mysql_query($sql);  

Note: mysql_* is depreciated in upper level PHP version and removed from PHP 7.*, So please avoid use them and start with mysqli_* or PDO.