How can I print SQL statement?

Question

I have a SQL statement that doesnt seem to be working, I've spent over an hour asking how to show what the statement looks like example:

$result = mysql_query("SELECT * FROM myTable WHERE id=$my_id AND status=$active");

Now all I need to do is view what the actual SQL is passed so I imagine it looks like this:

SELECT * FROM myTable WHERE id=2 AND status=4

I know this is probably super simple but the keywords im searching is not bringing back the answers, I've tried print_r, echo $result, mysql_fetch_array, etc. and it's not really getting what I need, can someone put me out of misery and tell me how I can get back the hour of my life i just wasted?

echo "SELECT * FROM myTable WHERE id=$my_id AND status=$active"? — Pekka
– Pekka, Commented Aug 12, 2012 at 12:54
warning your code may be vulnerable to sql injection attacks — Daniel A. White
– Daniel A. White, Commented Aug 12, 2012 at 12:54
As stated in the introduction to the PHP manual chapter on the mysql_* functions: This extension is not recommended for writing new code. Instead, either the mysqli or PDO_MySQL extension should be used. See also the MySQL API Overview for further help while choosing a MySQL API. — eggyal
– eggyal, Commented Aug 12, 2012 at 13:03
Thanks guys, im new to php and mysql and this is the basics i learned, so does this mean i have to recode my whole site or is it just where there is MySQL queries, any good resources for a newbie to make this transition and learn about mysqli or PDO and for a newbie which is better? — user1547410
– user1547410, Commented Aug 12, 2012 at 16:13

rm- · Accepted Answer · 2012-08-12 12:55:42Z

2

$sql = 'SELECT * FROM myTable WHERE id='.is_int($my_id).' AND status='.is_int($active);
$result = mysql_query($sql);
echo $sql;

answered Aug 12, 2012 at 12:55

rm-

1281 gold badge1 silver badge10 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Daniel A. White Over a year ago

this may introduce sql injection attacks.

rm- Over a year ago

yeah, it depends on if the status is a string or int, of cause. The best thing would be to use pdo and do prepared statements, but it doesn't seem that that's what's beeing used.

medusa1414 · Accepted Answer · 2012-08-12 12:54:36Z

1

Just echo it.

echo "SELECT * FROM myTable WHERE id=$my_id AND status=$active";

answered Aug 12, 2012 at 12:54

medusa1414

1,1691 gold badge9 silver badges14 bronze badges

Comments

BenMorel · Accepted Answer · 2014-05-18 21:20:36Z

0

$sql = 'SELECT * FROM myTable WHERE id='.mysqli_escape_string($my_id).' AND status='.mysqli_escape_string($active);
$result = mysqli_query($sql) or die mysqli_error()." Query:".$sql;

Use mysqli instead of mysql because mysql is deprecated Link.

edited May 18, 2014 at 21:20

BenMorel

37k52 gold badges208 silver badges339 bronze badges

answered Aug 12, 2012 at 14:13

Deepak

6,81718 gold badges71 silver badges121 bronze badges

Collectives™ on Stack Overflow

How can I print SQL statement?

3 Answers 3

2 Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

2 Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related