php - MySQL Query using $_GET -
ok, maybe i'm bit overtired, can't understand why isn't working! have comments box on website, profiles people post. want show posts in profile. profile page userinfo.php?user=(whatever)
this query failing:
$query = "select message,`date`,ip,name,website,id `guestbook_message` name=" . intval($_get['user']) . " , deleted=0 order `date` desc";
you getting name of user , casting directly integer , comparing name. not make sense.
if $_get['user']
id of user, compare id
, not name
.
if $_get['user'] username of user, have put quotes around username value. username value string, need encapsulate in quotes , remove intval
. this:
$query = "select message,`date`,ip,name,website,id `guestbook_message` name='" . mysql_real_escape_string($_get['user']) . "' , deleted=0 order `date` desc";
Comments
Post a Comment