Question

如果我试过这个`

function get_books_sql ( )
{
    global $CRUD;
    $dbh = $CRUD['dbh'];


                $title = '';
                $fullName = '';
                $name = '';
                $Ktitle = '';
                $Psurname = '';

                if(isset($_POST['Ktitle'])){
        $title = $_POST['Ktitle'];
        }

                if(isset($_POST['Surname'])){
                $fullName = $_POST['Psurname'];
                $name = explode(" ", $fullName);
}      

$sth = $dbh->prepare(" SELECT *  FROM book JOIN stock ON stock.k_id = book.k_id WHERE (book.title LIKE :Ktitle ) AND stock.sold = FALSE ");
                $sth->bindValue(':Ktitle', $title, PDO::PARAM_STR);

if($sth) $sth->execute(array('%'.$title.'%'));

else error('get_books_sql: select prepare returned no statement handle');

    $err = $sth->errorInfo();
    if($err[0] != 0) error( $err[2] );

    return($sth);
}

`当我为书名插入关键字时它会起作用如果我想同时为书名关键字和作者姓名和姓氏做两件事，我想用关键字标题和作者姓名和姓氏的关键字进行过滤，这两个查询单独工作，但我有作者姓名和姓氏的问题，我不知道如何我可以绑定它们并执行

有main.php文件：

    <!-- main html file for CRUD (php version) -->
<?php echo $CRUD["MESSAGES"] ?><?php echo $CRUD["ERRORS"] ?>
<div class="form">
<form action="<?php echo $CRUD["SELF"] ?>" method="post" name="book">
    <p class="subheading"><?php echo $CRUD["FORM_HEAD"] ?></p>

    <table class="form">
    <tr>
        <td><p class="Afield"> Title:</p></td>
        <td><input class="Afield" type="text" name="Ktitle" value="<?php echo $CRUD["Ktitle"] ?>"> </td>
    </tr>
        <tr>
        <td><p class="Afield"> Isbn:</p></td>
        <td><input class="Afield" type="text" name="kisbn" value="<?php echo $CRUD["Kisbn"] ?>"> </td>
    </tr>
        <tr>
        <td><p class="Afield"> Cena:</p></td>
        <td><input class="Afield" type="text" name="Kprice" value="<?php echo $CRUD["Kprice"] ?>"> </td>
    </tr>
        <tr>
        <td><p class="Afield"> Author:</p></td>
        <td><input class="Afield" type="text" name="Psurname" value="<?php echo $CRUD["Pname"] ?><?php echo $CRUD["Psurname"] ?>"> </td>

    </tr>

    <tr class="buttons"><td colspan="2">
<p class="buttons">
<?php echo $CRUD["BUTTONS"] ?><?php echo $CRUD["HIDDENS"] ?>
</p>
    </td></tr>
    </table>


</form>
</div>
<?php echo $CRUD["PRECONTENT"] ?><?php echo $CRUD["CONTENT"] ?><?php echo $CRUD["POSTCONTENT"] ?>

我为onyl做过：`

function get_books_sql ( )
{
    global $CRUD;
    $dbh = $CRUD['dbh'];


                $title = '';
                $fullName = '';
                $name = '';
                $Ktitle = '';
                $Psurname = '';

                if(isset($_POST['Ktitle'])){
        $title = $_POST['Ktitle'];
        }

                if(isset($_POST['Surname'])){
                $fullName = $_POST['Psurname'];
                $name = explode(" ", $fullName);
}      

        $sth = $dbh->prepare("SELECT *  FROM book, author, stock WHERE (CONCAT( author.name , ' ', author.surname ) ILIKE :Psurname ) AND book.p_id = author.p_id AND book.k_id = stock.k_id AND stock.sold = false ");

                $sth->bindValue(':Psurname', $fullName, PDO::PARAM_STR);

        if($sth)
        $sth->execute();

        else error('get_knjige_sql: select prepare returned no statement handle');

    $err = $sth->errorInfo();
    if($err[0] != 0) error( $err[2] );

    return($sth);
}`

这是我的整个查询，它适用于经过测试的数据： SELECT * FROM book，author，stock WHERE（book.title ILIKE'％a％'AND CONCAT（author.name，''，author.surname）ILIKE'％pavcek％'）AND book.p_id = author.p_id AND book.k_id = stock.k_id AND stock.sold = false;

但我必须这样做，我的意思是： SELECT * FROM book，author，stock WHERE（book.title ILIKE：Ktitle AND CONCAT（author.name，''，author.surname）ILIKE：Psurname）AND book.p_id = author.p_id AND book.k_id = stock.k_id AND stock.sold = false;

在连接到postgres数据库的php中绑定和执行变量

0 个答案: