How can I query something with points in variables?

Question

For my site there is a loginsystem where you need to login with your emailadress, but the problem is that my query gives an error when I start writing my emailadress whenever I use a point.

Here is my query:

  $sql = "SELECT LeerlingID FROM tblLeerlingen WHERE email = '$myusername' and Wachtwoord = '$mypassword'";

You need to quote the strings, like `WHERE email = '[email protected]' and Wachtwoord = '0dc22c6a909acf658232f6a38e780d7b'` — GMB, Apr 05 '19 at 18:08
Learn to use parameters! Do not munge query strings with user input. — Gordon Linoff, Apr 05 '19 at 18:20
but the user needs to fill in the fields to log in @GordonLinoff — Maarten Gregoor, Apr 05 '19 at 18:26
Nah, he is talking about SQL Injection, you may consider reading this topic: https://stackoverflow.com/questions/60174/how-can-i-prevent-sql-injection-in-php — maio290, Apr 05 '19 at 18:29

score 1 · Answer 1 · answered Apr 05 '19 at 18:07

1

Simply wrap your strings properly:

SELECT LeerlingID FROM tblLeerlingen WHERE email = '[email protected]' and Wachtwoord = '0dc22c6a909acf658232f6a38e780d7b';

answered Apr 05 '19 at 18:07

maio290

6,440
1
21
38

this is just the paste of my attempt in phpMyAdmin, in my code I have; SELECT LeerlingID FROM tblLeerlingen WHERE email = '$myusername' and Wachtwoord = '$mypassword' – Maarten Gregoor Apr 05 '19 at 18:09
Please edit your real code and the error into the question then. – maio290 Apr 05 '19 at 18:11
Why just duplicate comment? – SouXin Apr 05 '19 at 18:11
@SouXin I posted the answer at 2019-04-05 18:07:41Z, the comment was posted at 2019-04-05 18:08:46Z. – maio290 Apr 05 '19 at 18:11
@maio290 Sorry than – SouXin Apr 05 '19 at 18:12
The error is still missing. The SQL looks OK, so it's something else. – maio290 Apr 05 '19 at 18:19
Very bad advice!!! You should be explaining how and why to use parameters. – Gordon Linoff Apr 05 '19 at 18:21
@GordonLinoff : I really won't give anyone the talk about SQL injection, it's the second post at related questions. – maio290 Apr 05 '19 at 18:23

How can I query something with points in variables?

1 Answers1