MySQL query

monkeycracks · Post by **monkeycracks** » Wed Jul 11, 2007 2:44 am

Could someone with knowledge on MySQL queries help me out?

I have a table in a database called Users. In Users I have a field called un. I want to retrieve the value of un as matched by input.

So something like :

SELECT un FROM users WHERE un = WhateverValueHere
?

Hope I was clear enough..

bitplane · Post by **bitplane** » Wed Jul 11, 2007 1:02 pm

Code: Select all

select users.un from users where users.un = 'value';

but that only gives you users.un, which you already know right?

jrm · Post by **jrm** » Wed Jul 11, 2007 2:12 pm

If you do a "SELECT * FROM users WHERE un = WhateverValueHere" it will get all the rows for that record.

JRM

bitplane · Post by **bitplane** » Thu Jul 12, 2007 1:53 pm

also, remember that if you don't quote and escape your values, a user could pass "1; delete * from users;" or something similar as WhateverValueHere.. which could be rather nasty.

monkeycracks · Post by **monkeycracks** » Sat Jul 14, 2007 4:28 am

Thanks for your help you guys. The user won't actually be allowed to enter custom queries, this is just me fooling around with my own database for learning purposes basically.