I want to bind variables instead of just building SQL strings. Anyway to do this in Php?
Either MySQL or PostgreSQL answers would help.
Thanks
-
Binding records from a table to objects in your application or "binding" variables in PHP to variables in SQL?Peter Lindqvist– Peter Lindqvist2009-12-07 13:59:56 +00:00Commented Dec 7, 2009 at 13:59
-
"binding" variables in PHP to variables in SQL :)Robert Gould– Robert Gould2009-12-07 14:12:23 +00:00Commented Dec 7, 2009 at 14:12
Add a comment
|
4 Answers
There's e.g. PDO.
An introduction to pdo and prepared statements (including bound parameters) is located at http://docs.php.net/pdo.prepared-statements
1 Comment
Strae
carefull with PDO::bindParam: stackoverflow.com/questions/833510/…
You should read on the MySQL Improved Extension (MySQLi) at http://php.net/manual/en/book.mysqli.php , and on prepared statements
Comments
For Postgres specifically - pg_query_params (and pg_send_query_params) is the most primitive form of binding but still very useful.
And then there's PDO but the others already mentioned it.
Comments
There are a couple of flavors. I believe the more savvy individuals here will push for you to use PDO prepared statements. There is also a sprintf() version.
PDO
An answer has already been discussed on StackOverflow here.
SPRINTF
$sql = sprintf('SELECT * FROM table WHERE id = %d AND field = %s',
$id,
mysql_real_escape_string($value));
