使用PHP將數據插入MySQL數據庫

Question

我將數組傳遞給查詢。 但是，我似乎無法添加每個值`。

Im傳遞的數組是：

Array ( 
        [name] => Name 
        [address_1] => Address 1 
        [address_2] => Address 2 
        [address_3] => Address 3 
        [address_4] => Address 4 
        [post_code] => Post COde 
        [proptype] => rent 
        [style] => house 
        [beds] => 1 
        [bathrooms] => 1 
        [garden] => 1 
        [furnished] => yes 
        [deposit] => Deposit 
        [available] => 10/18/2013 
        [description] => Description 
      )

下面是我的代碼：

    foreach ($data as $column => $value) {
            $columns .= ($columns == "") ? "" : ", ";
            $columns .= $column;
            $values .= ($values == "") ? "" : ", ";
            $values .= $value;
    }

    $sql = "INSERT INTO $table ($columns) VALUES ($values)";

    echo "--->" . $sql;
    exit;

我知道我需要將每個值括起來，但是看不到需要在哪里做。

謝謝你的時間。

Answer 1

嘗試：

foreach ($data as $column => $value) {
    $columns .= ($columns == "") ? "" : ", ";
    $columns .= $column;
    $values .= ($values == "") ? "" : ", ";
    $values .= "'" . $value . "'";
}

Answer 2

您還可以使用一些內置的php函數：

// join column names with a comma
$columns = join(array_keys($data),',');

// pass every value through mysql-escape and join the values with quotes and commas
$values = join(array_map("mysql_real_escape_string",array_values($data)),'","');

// use the produced strings; make sure you wrap the values string with double quotes
$sql = "INSERT INTO $table ($columns) VALUES (\"$values\")";

供參考： array_keys ， array_values ， array_map ， mysql_real_escape_string ， join

出於安全原因，我正在使用mysql_real_escape_string。