MySQL查询可变通配符

Question

如果我执行我的PHP代码：

$serName = $_GET['username']; 
// Code for sanitation here 
// [...] 
$sql = "SELECT NAME FROM PLAYERS WHERE NAME LIKE '%$serName%'"; 

我得到除错误，我怎么在查询中使用的变量，两侧通配符？

Answer 1

正确的查询

SELECT NAME FROM PLAYERS WHERE NAME LIKE '%{$serName}%' 

而且你应该使用prepared statements

Answer 2

$sql = "SELECT NAME FROM PLAYERS WHERE NAME LIKE '%" .$serName. "%'";