How to input the echo value to complete the query? [on hold]

Help pls. I just want to complete the query but I don't know how to put the echo value show tables from (echo value which is the database).

show tables from (echo value which is the database)

<?php

if (isset($_POST['database'])){

echo $_POST['database'];

$qry = "show tables from ";
$res = mysqli_query($link,$qry);

while ($row = mysqli_fetch_array($res)){
echo $row[0]."<br>";
}
}


Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

1 Answer
1

you can easily complete your query with input values see below code :

<?php
if (isset($_POST['database'])){

echo $_POST['database'];

$qry = "show tables from " . $_POST['database'];
$res = mysqli_query($link,$qry);

while ($row = mysqli_fetch_array($res)){
echo $row[0]."<br>";
}
}

but take a look at sql injections hack if this function is internal function its ok but if you get your database name from an external client you should complete your query with something like below codes :

in PDO :

$query = "SELECT * FROM test_table WHERE enabled = 1 AND id = :id";
$stmnt = $db->prepare($query);
$stmnt->execute(array(':id' => $_POST['id']));