Mysql comments tag breaking my code (PHP)

Question

I'm using PDO to prepare querys, but when I put # or -- (SQL commentaries) it still working (I know PDO won't disable it) how to make it stop? this comments break my whole code. (I want allow to use it but stop breaking)
Eg:
SELECT * FROM something WHERE var=:var AND value=:value
I just put # and this happens
SELECT * FROM something WHERE var=:var# AND value=:value only will check for var/:var
(Assume :var was user input using #)

Why not just name the parameter :varnum instead of using characters that will break the query? — Zane Bien
– Zane Bien, Commented Jul 21, 2012 at 21:28

Cole Tobin · Accepted Answer · 2012-07-21 21:36:31Z

2

Enclose your variables with single quotes:

SELECT * FROM something WHERE var=':var#' AND value=':value'

edited Jul 21, 2012 at 21:36

Cole Tobin

9,43015 gold badges52 silver badges77 bronze badges

answered Jul 21, 2012 at 21:26

Johndave Decano

2,1032 gold badges16 silver badges16 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Pedro Gabriel Over a year ago

I didn't know single quotes disable comments, Thanks

Collectives™ on Stack Overflow

Mysql comments tag breaking my code (PHP)

1 Answer 1

1 Comment

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Linked

Related