php mysql where跟变量_php-在WHERE子句中使用变量

我是MySQL和PHP的新手.我有一个HTML表单,我想将1变量从该变量传递到我的PHP代码,然后在数据库上运行查询以获取将变量保存在“序列”列下的记录.当我对要查找的“序列”进行硬编码时,我可以很好地运行它,但是当我尝试使用变量时,我得到了一个错误.

任何帮助将不胜感激！或者是更好的方法.

这是我的错误：“ where子句”中的未知列“ amg002”

这是我的代码；

$serial= $_POST['Serial'];

echo $serial;

//Connect To Database

$link = mysql_connect($hostname,$username, $password) OR DIE ('Unable to connect to database! Please try again later.');

echo "Connected to MySQL
";

//Select the database - 'SiteInfo'

// Collects data from "SiteInfo" table

//****This is where I am running into the error***

$sql = 'SELECT * FROM `SiteInfo` WHERE `Serial` ='.$serial;

// This works!!!

//$sql = 'SELECT * FROM `SiteInfo` WHERE `Serial` ="amg002";';

$data = mysql_query($sql)

or die(mysql_error());

// puts the "SiteInfo" info into the $info array

$info = mysql_fetch_array( $data );

//Print out the contents of the entry

echo "Site Name: ".$info['SiteName'] . "

Print "Serial Number: ".$info['Serial'] . "
";

Print "Location: ".$info['Location'] . "
";

// Close the database connection

mysql_close($link);

echo "Connection Closed.
";