Reply To: Passing Form Variables to SQL

[DennisFaucher]

Fixed it. Yay.

$pandl = $_POST[“pl”];
$manuf_var = $_POST[“oem”];

$sql_var=”select ext_rev as x, discount as y, customer as z, manuf as w from innovation.ne_nj_tbl where pnl like ‘$pandl%’ and manuf like ‘$manuf_var%'”;

$handle = $link->prepare($sql_var);