mysql表名动态查询语句

<?php
$tablename = $_GET['table']; // 假设表名通过GET参数传入
$sql = "SELECT * FROM $tablename WHERE id = 1";
$result = mysqli_query($conn, $sql);
?>

<?php
$tablename = $_GET['table']; // 假设表名通过GET参数传入
$stmt = mysqli_prepare($conn, "SELECT * FROM ? WHERE id = ?");
mysqli_stmt_bind_param($stmt, "si", $tablename, 1);
mysqli_stmt_execute($stmt);
$result = mysqli_stmt_get_result($stmt);
?>

<?php
$allowed_tables = ['table1', 'table2', 'table3'];
$tablename = $_GET['table'];

if (!in_array($tablename, $allowed_tables)) {
    die("Invalid table name");
}

$stmt = mysqli_prepare($conn, "SELECT * FROM ? WHERE id = ?");
mysqli_stmt_bind_param($stmt, "si", $tablename, 1);
mysqli_stmt_execute($stmt);
$result = mysqli_stmt_get_result($stmt);
?>