php - 用户选择生成的sql查询

Answer 1

I would pass the values through a POST/GET AJAX or just straight form. It's your choice.

But the PHP code would be.

<?php
$colour = htmlspecialchars(mysql_real_escape_string($_POST['colour'])); //Or $_GET
$type = htmlspecialchars(mysql_real_escape_string($_POST['type'])); //Or $_GET
mysql_query("SELECT * FROM `table` WHERE `colour`='".$color."' AND `type`='".$type."'");

I suppose this is just my way of doing it.