Php 带有while循环的mysql查询问题

我写了一个查询，效果很好。但我需要一些帮助来编辑php的一部分“while”

昆登纳：

你的意思是你不想做整个while循环，只想做第一次迭代吗？你的代码容易受到攻击。您应该使用或准备带有绑定参数的语句，如.Nice代码转储中所述。想解释一下它的作用和原因吗？
<?php 

require ('db.inc.php');

echo mysql_error();
?>
<form action="#" method="get">
Kundennr: <input type="text" name="nummer" /><br />
<input type="Submit" value="Absenden" />
</form>

<?php
if ($_GET['nummer'])
{

$gruppe = $_GET['nummer'];
    echo $gruppe.":<br>";
$result = mysql_query("SELECT catalog_product_entity_media_gallery.value, customer_group_code, catalog_product_entity_varchar.value, sku, qty, catalog_product_entity_tier_price.value FROM `catalog_product_entity_tier_price`

JOIN catalog_product_entity on catalog_product_entity.entity_id = catalog_product_entity_tier_price.entity_id

JOIN customer_group ON customer_group.customer_group_id = catalog_product_entity_tier_price.customer_group_id 

JOIN catalog_product_entity_varchar ON catalog_product_entity_varchar.entity_id = catalog_product_entity.entity_id

JOIN catalog_product_entity_media_gallery ON catalog_product_entity_media_gallery.entity_id = catalog_product_entity.entity_id

WHERE customer_group_code = '$gruppe' AND catalog_product_entity_varchar.attribute_id = 71");
while ($row = mysql_fetch_array($result))
{
        $bilddaten = $row[0];
         $ids = $row[1];
        $ids1 = $row[2];
        $ids2 = $row[3];
        $ids3 = $row[4];
        $ids4 = $row[5];

    echo "<img src='http://localhost/media/catalog/product/cache/1/thumbnail/60x60/9df78eab33525d08d6e5fb8d27136e95/".$bilddaten."' >";
    echo "Art.Nr.: ".$ids2." Bezeichung: ".$ids1." ->Menge: ".$ids3." Preis: ".$ids4."<br><br>";
}
}

?>

$i=0;
while ($row = mysql_fetch_array($result))
{
     if($bilddaten=='' && $i==0)
     {
        $bilddaten = $row[0];
     }
         $ids = $row[1];
$i++;
}