Select Table (FROM) by string

Question

Is it possible, to use a dynamic value inside a SELECT FROM sql command?

Database->prepare("SELECT bomb FROM ? WHERE id=?")
    ->execute($strTable,$strID);

result:

Fatal error: Uncaught exception Exception with message Query error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near...

Answer 1

No. The table name cannot be a parameter of the query. You'd need to construct your query string first, concatenating the table name in.

Answer 2

Assuming $strTable is from a safe source just use

Database->prepare("SELECT bomb FROM $strTable WHERE id=?")
    ->execute($strID);