SQL 转义查询字符串？

Question

我无法转义查询字符串。我将我将用于数据库的所有变量放入一个数组中；

$playerInfo['steamID64'] = $info['steamID64'];

我无法在不显示错误消息的情况下在查询中使用它。看一下查询的末尾，我尝试 select 并使用下面的变量 $playerInfo['steamID64']：

$query = "SELECT `steamID64` FROM `players` WHERE `steamID64` = '$playerInfo[\'steamID64\']'";

它returns出现以下错误：

Parse error: syntax error, unexpected '' (T_ENCAPSED_AND_WHITESPACE), expecting identifier (T_STRING) or variable (T_VARIABLE) or number (T_NUM_STRING) in /home/sites/acidicservers.com/public_html/loading-acidic/index.php on line 154

Answer 1

这样使用

$query = "SELECT `steamID64` FROM `players` WHERE `steamID64` = '".$playerInfo['steamID64']."'";

SQL 转义查询字符串？

SQL Escape Query String?

php

mysql

escaping