php - 如何在mysql_query中添加变量

Question

我想在 $_GET['category'] 之后添加 $query_bookname 和 $query_author我怎样才能做到这一点？(双引号和单引号让我很困惑)

$query_bookname = "AND book_name LIKE '%".$_GET['book_name']."%' ";
$query_author = "AND author LIKE '%".$_GET['author']."%' ";

$result = mysql_query("
    SELECT * FROM book
    WHERE cate_name = '".$_GET['category']."' AND status = 1
");

Answer 1

您想这样做，但您需要解决代码中的弱点(根据 Shankar Damodaran):

$result = mysql_query("
SELECT * FROM book
WHERE cate_name = '".$_GET['category']."' AND status = 1
$query_bookname
$query_author
");