How to dynamically generate table names in SQL queries?

Question

I have a SQL query that uses a MySQL database to get information from it. The table name is the first constant with a different IMEI number at the end.

gs_object_data_12345678

12345678 is identified in my script as $_GET but when I try to change the table name it does not display the data from that table

$imei = $_GET['imei'];

 $result = $db->query("SELECT * FROM gs_object_data_'$imei' LIMIT 200 ");

If I use the following string it works

$result = $db->query("SELECT * FROM gs_object_data_12345678 LIMIT 200 ");

I need to change the table name with $_GETinformation

The

URL alarm_action.php?id=58543®=****&imei=862202228007105 contains the IMEI, so the information should pass through

Answer 1

Use like this

$imei = $_GET['imei'];
$result = $db->query("SELECT * FROM gs_object_data_" . $imei . " LIMIT 200 ");

or

$result = $db->query("SELECT * FROM gs_object_data_{$imei} LIMIT 200 ");

---

In a protected manner

$imei = $_GET['imei'];

$stmt = $db->prepare("SELECT * FROM gs_object_data_? LIMIT 200");
$stmt->bind_param("s", $imei);
$stmt->execute();

$result = $stmt->get_result();