php - 带有可变通配符的 MySQL 查询

Question

如果我执行我的 PHP 代码：

$serName = $_GET['username'];
// Code for sanitation here
// [...]
$sql = "SELECT NAME FROM PLAYERS WHERE NAME LIKE '%$serName%'"; 

我得到除法错误，如何在两边都带有通配符的查询中使用变量？

Answer 1

正确查询

SELECT NAME FROM PLAYERS WHERE NAME LIKE '%{$serName}%'

你应该使用准备好的语句

Answer 2

$sql = "SELECT NAME FROM PLAYERS WHERE NAME LIKE '%" .$serName. "%'";