How to retrieve column data from an MSSQL Query?

Question

I am trying to use a mssql Query to retrieve an id from a table row.

This is the code I am trying to use:

$username = $_COOKIE['ID_my_site']; 
    $sql ="SELECT id FROM users WHERE username = ".$username."";
    $query = mssql_query($sql, $conn);
    $array = mssql_fetch_assoc($query);
    $acc_id=stripslashes($array['id']);

    var_dump ($sql);
echo '<script>
alert("'.$acc_id.'");
</script>';

When I use this though, the sql is correct, from what I see using var_dump. But the alert from JavaScript is blank.

How can I get the alert to display the data from the id column?

The id data should be 5.

Thank you for any help, all help is appreciated.

If you +1 my question I will +1 your answer.

I will +1 an answer if I choose it as best answer, regardless if you +1 my question or not!

Your $username variable is not enclosed in quotes in your query. Also, this is vulnerable to SQL injection - use parameters in your queries. — Kryten
– Kryten, Commented Apr 8, 2014 at 16:47
Just got a Serial upvoting reversed on me :) -70 rep. Still its a net gain. :) That was a fun ride. — crthompson
– crthompson, Commented Apr 9, 2014 at 6:02

nanobash · Accepted Answer · 2014-04-08 16:48:29Z

1

Missing quotes in SQL query, try following

$sql ="SELECT id FROM users WHERE username = '".$username."'";
                                             ^ quotes      ^

answered Apr 8, 2014 at 16:48

nanobash

5,4967 gold badges41 silver badges56 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to retrieve column data from an MSSQL Query?

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related