Using PHP $_GET in oci_parse - php

Question

I need to use an echo $_GET['id']; in oci_parse but cannot seem to get it working. I have tried escaping it in ', " etc. but neither have worked.
Code:
$stid = oci_parse($conn, "
SELECT COLA,
(SELECT COLB FROM T2 WHERE T2.COLB = echo $_GET['id'];)
FROM T1
WHERE T1.COLA = echo $_GET['id'];
");

Answer 1

Method 1
$stid = oci_parse($conn, "SELECT COLA,
(SELECT COLB FROM T2 WHERE T2.COLB = {$_GET['id']})
FROM T1
WHERE T1.COLA = {$_GET['id']}");
Method - 2
$stid = oci_parse($conn, "SELECT COLA,
(SELECT COLB FROM T2 WHERE T2.COLB = ".$_GET['id'].")
FROM T1
WHERE T1.COLA = ".$_GET['id']."");

Answer 2

you have to do some validation before using it inside the query ..
if (ctype_digit($_GET['id'])){
$dIdUser = $_GET['id'];
$stid = oci_parse($conn, "
SELECT COLA,
(SELECT COLB FROM T2 WHERE T2.COLB =$dIdUser ;)
FROM T1
WHERE T1.COLA = $dIdUser;
");
}

Answer 3

Maybe you need after query first execute the query?
<?php
$conn = oci_connect('hr', 'welcome', 'localhost/XE');
// Parse the statement. Note there is no final semi-colon in the SQL statement
$stid = oci_parse($conn, 'SELECT * FROM employees');
oci_execute($stid);
echo "<table border='1'>\n";
while ($row = oci_fetch_array($stid, OCI_ASSOC+OCI_RETURN_NULLS)) {
echo "<tr>\n";
foreach ($row as $item) {
echo " <td>" . ($item !== null ? htmlentities($item, ENT_QUOTES) : " ") . "</td>\n";
}
echo "</tr>\n";
}
echo "</table>\n";
?>