inserting variable in mysql using php

[nofel]

hey folks, i m trying to insert and echo back data aganist that query i made this code

<?php
$cue = $_POST['fname'];
 
$result = ("SELECT * FROM info WHERE names = '$cue'")
[B]
while ($row = mysql_fetch_array($result))[/B]
{
echo $row["name"];
echo "<br/>";
}
?>

the bold line gives a error. i think i m doing wrong quotes on $result query too. wht to do.......

[Dan Grossman]

You assigned $result a string, you didn't actually run any query against the database

You need to call mysql_query()

$result = mysql_query("SELECT * FROM info WHERE names = '" . mysql_real_escape_string($cue) . "'"); 

[nofel]

<?php
$result = mysql_query("SELECT * FROM info WHERE names = '" . mysql_real_escape_string($cue) . "'");
while ($row=mysql_fetch_array("$result")
{
echo $row["name"];
echo "<br/>";
}
?>
now i m getting error on line 15 which is bold. am i doing it wrong or wht

[Dan Grossman]

You have more opening parentheses ( than closing ) on the previous line.

while ($row = mysql_fetch_array($result))
      ^                        ^       ^^
                                        | 
                                        missing

And don't add quotes around $result, it's not a string, it's a pointer to a resource in memory holding the buffered result set of the query

[oddz]

1. Missing a closing parenthesis on line 2 at the end
2. $result should not have quotes around it.
3. SQL statement needs to be delimited by a semicolon
4. [don't use double quotes unless you need to embed variables in a string]

[Dan Grossman]

3. SQL statement needs to be delimited by a semicolon

Not in PHP with mysql_query

resource mysql_query ( string $query [, resource $link_identifier ] )

Parameters

query

A SQL query

The query string should not end with a semicolon.

[AnthonySterling]

<?php
$rResult = mysql_query(
    sprintf(
        "SELECT name FROM info WHERE names = '%s'",
        mysql_real_escape_string($_POST['fname'])
    )
);
printf(
    '<h4>%s matching record(s) found.</h4>',
    mysql_num_rows($rResult)
);
while($aRecord = mysql_fetch_assoc($rResult))
{
    printf(
        '%s<br />',
        $aRecord['name']
    );
}
?>

[oddz]

SQL statement needs to be delimited by a semicolon

News to me. Then again I always use prepared statements which negate a delimiter.