LIMIT

[Anon]

am i doing this wrong somehow?

$sql="SELECT * FROM gallery LIMIT $next_start, 12";

$next_start is set correctly, and if i place 0 in there instead of $next_start then it works. as far as i know this code should work. any opinions?

[Anon]

Try this, just maybe:

$sql="SELECT * FROM gallery LIMIT {$next_start}, 12";

In case the comma is confusing the PHP parser.

BTW, please tell me you're not just inserting a user-controlled form variable straight into your SQL? eg. What happens if the user set $next_start to :

"0; DELETE FROM gallery;"

Chris

[simonsky]

This may be a bit better:

$sql="SELECT * FROM gallery LIMIT ".$next_start.", 12";

Simon

flagg wrote:

am i doing this wrong somehow?

$sql="SELECT * FROM gallery LIMIT $next_start, 12";

$next_start is set correctly, and if i place 0 in there instead of $next_start then it works. as far as i know this code should work. any opinions?

[simonsky]

Is it possible to have 2 queries in one mysql_query call? I can't do the

"select * from A;delete from B;", anyone knows the answer?

Simon

Chris wrote:

Try this, just maybe:

$sql="SELECT * FROM gallery LIMIT {$next_start}, 12";

In case the comma is confusing the PHP parser.

BTW, please tell me you're not just inserting a user-controlled form variable straight into your SQL? eg. What happens if the user set $next_start to :

"0; DELETE FROM gallery;"

Chris

[Anon]

Looks like it should work. Try echoing your $sql variable. My guess is that $next isn't what you think.