如何在查詢中使用變量？

Question

$this->db->query('SELECT Given_Name FROM member WHERE Member_No = $id_no');
echo $this->table->generate($query);

我正在嘗試使用 id_no 變量執行上述腳本。

Answer 1

如果您使用的是 MySQLi，最好使用准備好的語句：

$q = $this->db->prepare("SELECT Given_Name FROM member WHERE Member_No = ?;");
$q->bind_param("s", $id_no);
$q->execute();

$member = $q->fetch_array(MYSQLI_ASSOC))["Given_Name"];

更多信息： https://www.php.net/manual/en/mysqli.quickstart.prepared-statements.php