Question

如何执行此查询？

$pdo = Database::connect();
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
$sql = "SELECT * FROM attendancy 
          WHERE user_id = $user_id 
          AND date = '$date'";
$q = $pdo->prepare($sql);

Answer 1

要execute，您需要使用execute功能。 prepare函数的这种用法也不安全，每个变量都应该是一个占位符。

$pdo = Database::connect();
$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
$sql = "SELECT * FROM attendancy 
      WHERE user_id = ? 
      AND date = ?";
$q = $pdo->prepare($sql);
$q->execute(array($user_id, $date));
while($result = $q->fetch(PDO::FETCH_ASSOC)) {
     print_r($result);
}

PDOStatement :: execute，如何执行？

1 个答案: