带有可变通配符的MySQL Query

Question

如果我执行我的PHP代码：

$serName = $_GET['username'];
// Code for sanitation here
// [...]
$sql = "SELECT NAME FROM PLAYERS WHERE NAME LIKE '%$serName%'"; 

我得到除法错误，如何在双方使用通配符的查询中使用变量？

Answer 1

正确的查询

SELECT NAME FROM PLAYERS WHERE NAME LIKE '%{$serName}%'

你应该使用prepared statements

Answer 2

$sql = "SELECT NAME FROM PLAYERS WHERE NAME LIKE '%" .$serName. "%'";