php函数运行mysql查询

Question

I am trying to create functions to run mysql queries

How would I do things like insert queries. I was thinking

function insert_query ($table,$cols,$values)
{
$sql="insert into $table ($cols) values ($values) "; ...etc
}

With the rest of the query code in the function. But how would I add multiple columns and values?

Should I make $cols and $values An array inside the function?

Answer 1

Easy, just us arrays

function insert_query ($table,$cols,$values){
    $sql="insert into $table (".implode(",", $cols).") values (".implode("','", $values)."'') ";
}

insert_query('exampleTable', array('column_1', 'column_2', 'column_3'), array('a', 123, 'c') );

The implode for the values requires a small sidenote:
Strings always required being wrapped in quotes. Therefor I made the implode with single qoutes. The downside to this is that integets (like 123 in the example) also get wrapped.
This is not a big problem, but if you want you could replace the implode with a foreach that uses is_numeric to check wether it should be wrapped in quotes.

IMPORTANT SECURITY NOTE:
In this example I havent used proper seurity, like escape_string() , this has to be added! I've not added thos to keep the examples smaller

---

Another approach could be key/value-usage of an array:

function insert_query ($table,$data){
    $cols = array_keys($data);
    $values = array_values($data);
    $sql = "insert into $table (".implode(",", $cols).") values (".implode("','", $values)."'') ";
}
$info = array('column_1'=>'a', 'column_2'=>123, 'column_3'=>'c');
$info['example'] = 'Easy method to add more key/values';
insert_query('tableName', $info);

Answer 2

In this case you can use functions similar to codeigniter functions. Use arrays to store table name and columns or values

For example:

$data = array('hid' => $hcsdate,'start_date' => $sdate, 'end_date' => $edate, 'title' =>$title);

Here $data holds the column name and corresponding values.

And pass this $data to another functions for insert, update etc..

Answer 3

Here is what I'm using. Pass field name and Value as Array key and value. $lsQry is an array of field name & value pair

function insert_record($table,$lsQry)
{
    $fields_str = implode(',',array_keys($lsQry));
    $data_str = implode("','",$lsQry);        
    $data_str = "'" . implode("','", $lsQry) . "'";         

    $lsQry = "INSERT INTO $table($fields_str) VALUES($data_str)";
    $rs = mysql_query($lsQry);

    if(isset($rs))
        return true;
    else
        return false;        
}

Please Note

For this function, do consider that function is getting an array of fields name and value pair. It is assumed that htmlentities() and addslashes() or any escaping functions are already applied while creating array from post/get values.

Answer 4

This is a function of my Database Class.

public function insert($table,$values){               
                $fieldNames = "";
                $fieldValues = "";

                foreach($values as $key => $value){
                    $fieldNames .= "$key,";
                    $fieldValues .= "$value,";
                }
                $fieldNames = substr($fieldNames,0,-1);
                $fieldValues = substr($fieldValues,0,-1);
                $sql = "INSERT INTO $table($fieldNames) VALUES ($fieldValues)";

                $this->newConnection();
                $result = $this->mysqli->query($sql);
                $this->closeConnection();
                return $result;
  }