php - 通过 PHP Mysql 搜索

Question

我想从表单中获取一些变量，我将使用这些变量来制作搜索栏，例如:

$var=$_POST['var']

我想将此变量放入如下请求中:

$SQL = 'SELECT * FROM Table ORDER By $var'

请问有什么建议吗？如何将此请求转换为动态请求？谢谢你:)

代码是:

<form>
     <lable for="Variable">
     <input type ="text" name="variable" placeholder="Search by : ">
</form> 
<?php
    $variable = $_POST['variable'] 
    sql = 'SELECT * FROM Total ORDER BY $variable'; 
?>

Answer 1

请引用PDO和 order by审查。

您的选择查询将是

SELECT * FROM yourtable ORDER BY DATABASE_FIELD;