MySQLi 中的 SELECT * FROM
时间：2023-07-31问题描述
我的网站相当广泛，我最近才切换到 PHP5(称我为大器晚成的人).
My site is rather extensive, and I just recently made the switch to PHP5 (call me a late bloomer).
我之前所有的 MySQL 查询都是这样构建的:
All of my MySQL query's before were built as such:
"SELECT * FROM tablename WHERE field1 = 'value' && field2 = 'value2'";
这使它变得非常容易、简单和友好.
This made it very easy, simple and friendly.
出于明显的安全原因，我现在正在尝试切换到 mysqli，并且我很难弄清楚如何在 bind_param<时实现相同的 SELECT * FROM 查询/code> 需要特定参数.
I am now trying to make the switch to mysqli for obvious security reasons, and I am having a hard time figuring out how to implement the same SELECT * FROM queries when the bind_param requires specific arguments.
这句话是过去式了吗?
如果是，我该如何处理涉及大量列的查询?我真的需要每次都把它们都打出来吗?
If it is, how do I handle a query with tons of columns involved? Do I really need to type them all out every time?
推荐答案
"SELECT * FROM tablename WHERE field1 = 'value' && field2 = 'value2'";
变成
"SELECT * FROM tablename WHERE field1 = ? && field2 = ?";
传递给 $mysqli::prepare:
$stmt = $mysqli->prepare(
"SELECT * FROM tablename WHERE field1 = ? && field2 = ?");
$stmt->bind_param( "ss", $value, $value2);
// "ss' is a format string, each "s" means string
$stmt->execute();
$stmt->bind_result($col1, $col2);
// then fetch and close the statement
OP 评论:
所以如果我有 5 个参数，我可能会有sssis"或其他东西(取决于输入的类型?)
so if i have 5 parameters, i could potentially have "sssis" or something (depending on the types of inputs?)
对，准备好的语句中每个 ? 参数都有一个类型说明符，所有这些都是位置说明符(第一个说明符适用于第一个 ? ，它被第一个实际参数(哪个是 bind_param)) 的第二个参数.
Right, one type specifier per ? parameter in the prepared statement, all of them positional (first specifier applies to first ? which is replaced by first actual parameter (which is the second parameter to bind_param)).
这篇关于MySQLi 中的 SELECT * FROM的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持html5模板网！
相关文章
mysql 中的 store_result() 和 get_result() 返回 falsestore_result() and get_result() in mysql returns false(mysql 中的 store_result() 和 get_result() 返回 false)- 调用未定义的函数 mysqli_result::num_rows()Call to undefined function mysqli_result::num_rows()(调用未定义的函数 mysqli_result::num_rows())
- PHP 准备好的语句问题PHP Prepared Statement Problems(PHP 准备好的语句问题)
- mysqli_fetch_array 只返回一个结果mysqli_fetch_array returning only one result(mysqli_fetch_array 只返回一个结果)
- PHP MySQLi 多次插入PHP MySQLi Multiple Inserts(PHP MySQLi 多次插入)
- 如何确保 MySQL 中的值在 PHP 中保持其类型?How do I make sure that values from MySQL keep their type in PHP?(如何确保 MySQL 中的值在 PHP 中保持其类型?)