sql查询中的php变量

Question

我有这个：

$result = mysql_query("SELECT * FROM animals WHERE hand= " .$_SESSION['SESS_HAND']. ");

但总是显示“解析错误：解析错误，期望T_STRING' orT_VARIABLE”或“T_NUM_STRING”

Answer 1

始终转义字符串变量：

$result = mysql_query("SELECT * FROM animals WHERE hand= '" .
mysql_real_escape_string($_SESSION['SESS_HAND']). "'");