php 怎么设置查询格式,php – 正确的查询格式

我正在制作一个测试程序,我需要使用此代码：

"href=\"testmng.php?manageqn=" . htmlspecialchars_decode($r['testname'], ENT_QUOTES) . "?subjectname=". htmlspecialchars_decode($r['subname'], ENT_QUOTES)

我的问题是当manageqn和subjectname具有正确的值时,正确的格式是什么：

else if ((isset($_REQUEST['manageqn'])) && (isset($_REQUEST['subjectname']))) {

$testname = $_REQUEST['manageqn'];

$subname = $_REQUEST['subjectname'];

$result = executeQuery("select testid from test where testname='" . htmlspecialchars($testname, ENT_QUOTES) . "';");

if ($r = mysql_fetch_array($result)) {

$_SESSION['testname'] = $testname;

$_SESSION['subjectname'] = $subname;

$_SESSION['testqn'] = $r['testid'];

header('Location: prepqn.php');

}

}