[office politics]

strings must be enclosed in single or double quotes.

PHP Code:

$query = "select * from tablename where col = '".$data."'"