How to pass a variable from Jquery to PHP using Ajax?

Question

How do i pass a variable from Jquery to PHP?

var itemId = $(this).attr('name');
$.ajax({
    url: "loaditems.php",
    method: "GET",
    success: function(result){
    alert(result);
}});

I want to add a number in PHP at the end of my SQL request.

$sql = "SELECT * FROM SmiteItems WHERE ID = ";

I know there are many questions like this, but other questions are made by people who have more complicated structures which i don't understand.

Show us how you run the query so I can tell you that it's probably vulnerable — Spoody
– Spoody, Commented Mar 18, 2018 at 23:29
There must be 1,000 examples on SO alone and 1,000,000 on the internet in tutorials etc — RiggsFolly
– RiggsFolly, Commented Mar 18, 2018 at 23:39
Possible duplicate of Javascript variable to PHP using Jquery AJAX — Jose da Silva Gomes
– Jose da Silva Gomes, Commented Mar 19, 2018 at 2:15

Del · Accepted Answer · 2018-03-19 01:04:32Z

1

Use the POST method, then try using PHP PDO for making sql queries http://php.net/manual/en/pdo.query.php

 var itemId = $(this).attr('name');
    $.ajax({
        url: "loaditems.php",
        method: "POST", //change
        data: { myVar: itemId }
        success: function(result) {
            alert(result);
        }
    });

Then in your PHP code

 //Get post value from AJAX
    $itemId = $_POST['myVar'];

    \\PDO Example
    $sql = "SELECT * FROM SmiteItems WHERE ID = ?";
    $result = $pdo->prepare($sql);
    $result->bindparam(1, $itemId);
    $result->execute();

edited Mar 19, 2018 at 1:04

answered Mar 19, 2018 at 0:49

Del

1621 silver badge7 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Spoody Over a year ago

Why it must be the POST method?

BotDamian Over a year ago

Yes it was because of the method. GET is only getting data, but when i want to specify "what data i want" aka "i want only the names column" it must be post.

Ali Sheikhpour · Accepted Answer · 2018-03-19 20:56:19Z

-2

add data in ajax call and use that data in target url:

var itemId = $(this).attr('name');
$.ajax({
    url: "loaditems.php",
    method: "GET",
    data: {number:itemId},
    success: function(result){
    alert(result);
    }
});

and then in loaditems.php

$sql = "SELECT * FROM SmiteItems WHERE ID = " . $_GET['number'];

As this is not a database and security question, I write no more about SQL INJECTION. Please use "post" method and read more about injection.

edited Mar 19, 2018 at 20:56

answered Mar 18, 2018 at 23:13

Ali Sheikhpour

11.4k5 gold badges53 silver badges100 bronze badges

5 Comments

Ostn Over a year ago

Use POST instead ?

Sebastian Walker Over a year ago

The sql query is prone to sql injection when left like this! You need to escape any user input before passing it to the database! Also, use the '.' concatenation operator instead of numerical '+'.

Ali Sheikhpour Over a year ago

I have updated the code from + to . For difference between get and post security, please check this: security.stackexchange.com/questions/33837/… @MehdiBounya

Spoody Over a year ago

@AliSheikhpour GET is not secure for sensitive data, but you can still use GET for GETting data, but that depends on the context I guess...

Ali Sheikhpour Over a year ago

You are right. Get and Post is not the context of this question. I had no idea why my answer was downvoted so I added a few details about security.

Collectives™ on Stack Overflow

How to pass a variable from Jquery to PHP using Ajax?

2 Answers 2

2 Comments

5 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

5 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related