<?php
$fields= "firstname, lastname, address";
$query = "SELECT $fields FROM friends
WHERE firstname='test'";
...
?>