Content · Web Development · PHP

PHP Mysqli::query() Method: Usage and Examples

Executes a SQL statement and returns a result object or boolean as appropriate. Never interpolate untrusted values into the SQL; use prepared statements for user input.

1 views Published Oct 17, 2026 Updated Oct 17, 2026 admin

Executes a SQL statement and returns a result object or boolean as appropriate.

The examples focus on the operation itself, including the important distinction: prepare separates statement text from parameter data.

What It Does


Use the examples below to observe the behavior on a small dataset before extending it to application code.

Syntax and Return Value


Mysqli::query(...) — requires the corresponding optional extension

The displayed signature describes the API or identifies any correction or optional dependency. When a parameter is optional, supply it only when the task requires it.

Example 1: Basic Use


Examples assume a demo database containing users(id, email, active), products(id, name, price), and orders(id, user_id, total) as required by the query.

<?php
$mysqli = new mysqli(getenv('DB_HOST') ?: '127.0.0.1', getenv('DB_USER') ?: 'app', getenv('DB_PASSWORD') ?: '', getenv('DB_NAME') ?: 'demo');
$mysqli->set_charset('utf8mb4');
$selectedId = 7;
$result = $mysqli->query('SELECT id, email FROM users ORDER BY id LIMIT 3');
foreach ($result as $row) { echo $row["email"] . PHP_EOL; }

This example is meant for a configured application environment; output depends on the installed extension, external service, or database contents.

Example 2: Checking Behavior


Examples assume a demo database containing users(id, email, active), products(id, name, price), and orders(id, user_id, total) as required by the query.

<?php
$mysqli = new mysqli(getenv('DB_HOST') ?: '127.0.0.1', getenv('DB_USER') ?: 'app', getenv('DB_PASSWORD') ?: '', getenv('DB_NAME') ?: 'demo');
$mysqli->set_charset('utf8mb4');
$selectedId = 12;
$result = $mysqli->query('SELECT id, email FROM users ORDER BY id LIMIT 3');
foreach ($result as $row) { echo $row["email"] . PHP_EOL; }

This example is meant for a configured application environment; output depends on the installed extension, external service, or database contents.

Example 3: Practical Example


Examples assume a demo database containing users(id, email, active), products(id, name, price), and orders(id, user_id, total) as required by the query.

<?php
$mysqli = new mysqli(getenv('DB_HOST') ?: '127.0.0.1', getenv('DB_USER') ?: 'app', getenv('DB_PASSWORD') ?: '', getenv('DB_NAME') ?: 'demo');
$mysqli->set_charset('utf8mb4');
$selectedId = 24;
$result = $mysqli->query('SELECT id, email FROM users ORDER BY id LIMIT 3');
foreach ($result as $row) { echo $row["email"] . PHP_EOL; }

This example is meant for a configured application environment; output depends on the installed extension, external service, or database contents.

Important Behavior and Edge Cases


Never interpolate untrusted values into the SQL; use prepared statements for user input.

This API is supplied by an optional extension that is not installed in the local test runtime, or requires a different PHP version. The example must be verified in a matching environment.

Comparison with Related Approaches


ApproachDifference
Mysqli::queryExecutes a SQL statement and returns a result object or boolean as appropriate.
Related API or alternativeprepare separates statement text from parameter data.

Common Beginner Mistakes


MistakeCorrect approach
Ignoring the operation-specific limitsNever interpolate untrusted values into the SQL; use prepared statements for user input.
Confusing it with a related APIprepare separates statement text from parameter data.

Key Takeaways


  • Executes a SQL statement and returns a result object or boolean as appropriate.
  • Never interpolate untrusted values into the SQL; use prepared statements for user input.
  • prepare separates statement text from parameter data.

Use Mysqli::query when its documented behavior matches the problem. Test the relevant edge cases in your own runtime before deploying it.

Share this resourceSend this page to someone who may find it useful.