如何使用 PHP 变量为 MYSQL 准备查询字符串？

Question

我有这个在 phpmyadmin 中有效但在 php 中无效的查询。 有什么替代方法吗？

$servername = "localhost";
$username = "user";
$password = "password";
$dbname = "dbname";
$conn = new mysqli($servername, $username, $password, $dbname);
if ($conn->connect_error) {die("Connection failed: " . $conn->connect_error);}

$champname = 'name';

$sql = "SELECT column1, column2, column3, column4, column5
FROM champions 
WHERE champion = '$champname' ORDER BY ID DESC LIMIT 1";

$result = $conn->query($sql);
$row = $result->fetch_assoc();

任何帮助将不胜感激

我猜'$champname'是这里的问题。

Answer 1

尝试这个

$sql = "SELECT column1, column2, column3, column4, column5 FROM champions WHERE champion = $champname ORDER BY ID DESC LIMIT 1";

或者

$sql = "SELECT column1, column2, column3, column4, column5
FROM champions 
WHERE champion = `$champname` ORDER BY ID DESC LIMIT 1";

Answer 2

$sql = "SELECT column1, column2, column3, column4, column5 FROM Champions WHERE Champion = '".$champname."' ORDER BY ID DESC LIMIT 1";