SQL查询返回错误结果

Question

At the top of my file I have checked what the $clientid is using echo $clientid . This echoes 731.

Further down the script I'm running this query:

$active_ts = db_select("SELECT * FROM `timesheets` WHERE clientid='".$clientid."' AND status=\"client\" OR status=\"cand\"");
var_dump($active_ts); 

What I expect to happen is only timesheets with a clientid of 731 to be chosen.

What the var_dump shows however is ["clientid"]=> string(3) "345" , ["clientid"]=> string(3) "712" , ["candid"]=> string(3) "730" and ["clientid"]=> string(3) "721"

I don't really know how to debug this further....

Answer 1

This is your query:

SELECT *
FROM `timesheets`
WHERE clientid = '".$clientid."' AND status = 'client' OR status = 'cand'

The WHERE clause has no parentheses. It is interpreted as:

WHERE (clientid = '".$clientid."' AND status = 'client') OR status = 'cand'

This is presumably not what you want. I would suggest you use IN :

WHERE clientid = '".$clientid."' AND status  IN ('client', 'cand')

Answer 2

Because query select user with status = cand .

You need to change your query :

Change :

$active_ts = db_select('
    SELECT * FROM `timesheets` 
    WHERE clientid='.$clientid.' AND (status="client" OR status="cand")
');

I think you don't need ' between clientid because it's int.