从php更新MS sql服务器中的多行的问题

Question

I am trying to update multiple rows of a table via php using the below code :

$sql ="update [TableName] set status = 1 where producturl in (?)";
$param = array($purl);
$response = sqlsrv_query($conn,$sql,$param);

where $purl = ('h','a','b','c','d')

The above code is not updating anything.

Answer 1

Yes, because you are inserting one single parameter. The query translates to

update [TableName] 
set status = 1
where producturl in ("'h','a','b','c','d'")

So you could use multiple parameters

update [TableName] 
set status = 1
where producturl in (?,?,?,?,?)

or build a query string

$arr = join(',',$purl); 

$sql = "update [TableName] 
        set status = 1
        where producturl in ($arr)";

But then watch out for SQL injection. Always escape user input.

Answer 2

I did it like below :

$purl = "('h','a','b','c','d')";
$sql ="update [TableName] set status = 1 where producturl in ".$purl;  
$response = sqlsrv_query($conn,$sql);