how to retrieve data from mysql via php form (how to pass whole query in parameter)

[bartosz]

need my php page to be more like an interface to mysql. how can I use a text box to insert full sql query which is passed into parameter and get me a data I am asking for? I need my input to be whole query from start to the end.

thanks

[code green]

You would pass a whole query the same way as passing one piece of data.
But this is not very secure and maybe large strings are unreliable.
Which part of this process is causing problems?

[bartosz]

$query ="SELECT * from table where id='1' AND name LIKE '$form_input'";
I want $form_input - to be the whole query. means I need to send actual SQL statement from the form. in my text field I want to be able to type: select * from table where..., submit the form and get result displayed by php. Any chance sth like this would work: $query = $form_input. I also know it's not a secure way to do this but that's the only idea I've got... and by the way: it's going to be sth like SQL tutorial - user types statement and if data is not retreived then error instead.
thank you in advance

[Dormilich]

means I need to send actual SQL statement from the form.

never, ever do that. server-side code must not be leaked to the client (this is like posting your root password on the web).

[code green]

The usual way would be for the user to fill in textboxes, then when form is submitted, process this and build the query 'live-time'.
So in process_form.php something like

$form_input = $_POST['form_input']; #cleanse/validate data here
$id = $_POST['form_input'];#cleanse/validate data here
$query ="SELECT * from table where id='$id' AND name LIKE '$form_input'";

I am not sure what you are trying to achieve with your whole query idea.