有没有比 VALUES($var1, $var2, $var3) 更好的方法来向 MySQL 查询插入值？

Question

I just have the array of 15 values that all need to be inserted into the table. And I was just wondering if there is anything like this:

INSERT INTO table VALUES($myarrayofvalues)

Just curious, would be very useful.

Update:
Just one row with 15 columns.

Answer 1

$query = "INSERT INTO table VALUES('" . implode("', '", $myarrayofvalues) . "')";

Edit :

If you haven't done your escaping yet, you can do that in a tiny loop before the above statement, something like:

foreach($myarrayofvalues as $k=>$v)
    $myarrayofvalues[$k] = mysql_real_escape_string($v);

Answer 2

While you can do what's show in the answer by Rick , it is open to SQL injection.

There is really no good way to do this without some kind of column mapping. That is something to state element 1 is a string, element 2 is an integer.

As such, I see two choices:

1. Escape everything

   $values = array(); foreach ($myarrayofvalues as $value) { $column[].= "'". mysql_real_escape_string($value). "'"; } $sql = "INSERT INTO table VALUES(". implode(',', $values). ")";

2. Write the complete SQL statement

   $sql = "INSERT INTO table (column1_string, column2_int, ...) VALUES ('". mysql_real_escape_string($myarray[0]). "', ". (int)$myarray[1]. ", ...)

I prefer #2 because it is more readable and less brittle. Currently if your schema or array changes, your code breaks.