PHP Syntax

I've got txt1 being submitted from a form field on my html page, but what is the proper syntax for this query field? This is what I have:


$query = "SELECT NAME, CITY, EMAIL WHERE FANID = '${txt1}' ";

>>7
Christ, you literally only have to fill in the blanks:
$query = "SELECT NAME, CITY, EMAIL WHERE FANID = '' or '' = ''";
See how FANID = '' or '' = '' is always true? Your code is vulnerable to SQL injection attacks.