What are the potential risks of using apostrophes with integers in a MySQL query in PHP?

Using apostrophes with integers in a MySQL query can cause syntax errors or unexpected behavior. To avoid this issue, integers should not be enclosed in apostrophes in the query. Instead, they should be used directly in the query without any quotation marks. 

// Incorrect way with apostrophes
$intVar = 5;
$query = "SELECT * FROM table WHERE id = '$intVar'";

// Correct way without apostrophes
$intVar = 5;
$query = "SELECT * FROM table WHERE id = $intVar";

Keywords

apostrophes integers MySQL query PHP risks

Related Questions