如何在查询中使用变量？

Question

$this->db->query('SELECT Given_Name FROM member WHERE Member_No = $id_no');
echo $this->table->generate($query);

我正在尝试使用 id_no 变量执行上述脚本。

Answer 1

如果您使用的是 MySQLi，最好使用准备好的语句：

$q = $this->db->prepare("SELECT Given_Name FROM member WHERE Member_No = ?;");
$q->bind_param("s", $id_no);
$q->execute();

$member = $q->fetch_array(MYSQLI_ASSOC))["Given_Name"];

更多信息： https://www.php.net/manual/en/mysqli.quickstart.prepared-statements.php