PHP 'For Each' 将行从数组或字符串插入 mysql

Question

I am trying to insert multiple rows into a table based on the array...with each $value being each of the comma separated values.

I know this is NOT the best way or even correct way to do this - just trying to get some guidance on how to achieve this the right way.

$someArray=array(96,97,98,99,100,101,103,105);
foreach($someArray as $value){ 

$sql = "INSERT INTO bid_package(user_company) VALUES('".$value."');";
echo $sql;
echo "<br />";


 INSERT INTO bid_package(user_company) VALUES('96');
 INSERT INTO bid_package(user_company) VALUES('97');
 INSERT INTO bid_package(user_company) VALUES('98');
 INSERT INTO bid_package(user_company) VALUES('99');
 INSERT INTO bid_package(user_company) VALUES('100');
 INSERT INTO bid_package(user_company) VALUES('101');
 INSERT INTO bid_package(user_company) VALUES('103');
 INSERT INTO bid_package(user_company) VALUES('105');

Answer 1

You can put multiple lists of values in a single INSERT :

$values = implode(', ', array_map(function($val) {
    return "($val)";
    }, $someArray));
$sql = "INSERT INTO bid_package (user_company) VALUES $values;";

This will create a query that looks like this:

INSERT INTO bid_package (user_company) VALUES (96), (97), (98), (99), (100), (101), (103), (105);

If you were using PDO, it would be better to use a prepared statement, to prevent SQL-injection.

$values = implode(', ', array_fill(0, count($someArray), "(?)"))
$sql = "INSERT INTO bid_package (user_company) VALUES $values;"
$stmt = $conn->prepare($sql);
$stmt->execute($someArray);

Answer 2

First, you should be using prepared statements instead of inserting the variable directly into the query. Here is one way of doing what you are attempting.

$mysqli = new mysqli('localhost', 'user', 'password', 'mysampledb'); // your mysqli handle

$stmt = $mysqli->prepare("INSERT INTO SampleTable VALUES (?)"); // prepare your query

//bind value as a reference
$stmt->bind_param('s', $val);

//define values
$someArray=array(96,97,98,99,100,101,103,105);

//loop through values
foreach($someArray as $val) {
    //execute statement
    $stmt->execute();
}

If you are ever passing data to a query, you should use prepared statements.