Passing $_GET[var_name] to a query string

scriderpsd

Okay, here is the error I'm getting.

Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /srv/www/htdocs/web_test/trans.php on line 1517

And here is the code in question...


	$sql="SELECT * FROM active WHERE last_name=$_GET[lname_select]";
	$conn = db_trans_connect();
	$result = mysql_query($sql,$conn);

	echo '<form METHOD=POST ACTION="trans.php?index_radio=8&submit=Submit">';

	echo '<TABLE cellSpacing=0 cellPadding=0 width="100%" border=0>';
	echo '<TBODY>';

	// title row
	echo '<TR>';
	echo '<TD align=center colspan=10 rowspsan=4><H1>SPECIAL EDUCATION TRANSPORTATION REQUEST</H1></TD>';
	echo '</TR>';

	while ($row=mysql_fetch_array($result)) {

The form is supposed to be populated based on a selection from a dropdown on the previous page. I'm able to echo variable passed from the previous page. e.g...

echo $_GET[lname_select];

...but I can't get it to correctly pass into my new query string to pull from the database.

Let me know if I need to provide anymore info. I've been stuck on this for an hour.

Thanks in advance,

Scott

ClarkF1

A couple of things were wrong. One of them was the lack of single quotes around the string. The other involved the ".variable." (I'm not sure what to call it)

$sql="SELECT * FROM active WHERE last_name='".$_GET['lname_select']."'";

NogDog

Or, for oddballs like me who like to use "complex variable notation" instead of string concatenation:

$sql="SELECT * FROM active WHERE last_name='{$_GET[lname_select]}'";

bradgrafelman

NogDog wrote:
Or, for oddballs like me who like to use "complex variable notation" instead of string concatenation:
$sql="SELECT * FROM active WHERE last_name='{$_GET[lname_select]}'";

Except that you need quotes around the array index, unless you're trying to specify a constant...

NogDog

bradgrafelman wrote:
Except that you need quotes around the array index, unless you're trying to specify a constant...

Oops. That's what happens when I copy-and-paste someone else's code. :o