包含php数组键的Mysql查询？即。"WHERE profession = $user['profession']“

Question

我该如何处理这样的事情：

"SELECT skills FROM jobs WHERE profession = $user['profession']"

其中profession是一个字符串...

Answer 1

只需使用

"SELECT skills FROM jobs WHERE profession = '{$user['profession']}'"

PHP允许您像这样混合使用引号

注意：假设所有安全检查和验证都在此位之前完成

Answer 2

另一种替代方式

"SELECT skills FROM jobs WHERE profession = 
'".mysql_real_escape_string($user['profession'])."'";

如果您不需要mysql_real_escape_string()，只需删除它。

 "SELECT skills FROM jobs WHERE profession ='".$user['profession']."'";

Answer 3

$profession = mysql_real_escape_string( $user['profession'] );
$query = 'SELECT skills FROM jobs WHERE profession = "' . $profession . '"';