MySQL查詢可變通配符

Question

如果我執行我的PHP代碼：

$serName = $_GET['username']; 
// Code for sanitation here 
// [...] 
$sql = "SELECT NAME FROM PLAYERS WHERE NAME LIKE '%$serName%'"; 

我得到除錯誤，我怎麼在查詢中使用的變量，兩側通配符？

Answer 1

正確的查詢

SELECT NAME FROM PLAYERS WHERE NAME LIKE '%{$serName}%' 

而且你應該使用prepared statements

Answer 2

$sql = "SELECT NAME FROM PLAYERS WHERE NAME LIKE '%" .$serName. "%'";