所以我尝试使用pdo(一个mysql动态查询)来构建和准备。这是我的代码和调试信息。
$allowed_filters = array('hotels.star_rating', 'countries.id');
$where = 'WHERE 1 ';
if (!empty($data['filters'])){
$where = 'WHERE';
foreach ($data['filters'] as $field => $value){
if (in_array($field, $allowed_filters)){
$where .= " $field = :$field &&";
}
else unset($data['filters'][$field]);
}
$where = rtrim($where, '&&');
$where = ($where == 'WHERE')? 'WHERE 1 ' : $where;
}
$st = $this->db->prepare("
SELECT
hotels.code,
hotels.name as name,
hotels.star_rating,
hotels.description,
hotels.cover_image,
countries.name as country,
cities.name as city
FROM
hotels JOIN cities ON cities.id = hotels.city_id
join countries on countries.id = cities.country_id
$where
");
$st->execute($data['filters']);
var_dump($st->fetch());
就在$st->execute($data['filters'])行之前,我转储了$st和$data['filters']。数值如下。
价值$ST
PDOStatement Object
(
[queryString] =>
SELECT
hotels.code,
hotels.name as name,
hotels.star_rating,
hotels.description,
hotels.cover_image,
countries.name as country,
cities.name as city
FROM
hotels JOIN cities ON cities.id = hotels.city_id
join countries on countries.id = cities.country_id
WHERE
hotels.star_rating = :hotels.star_rating &&
countries.id = :countries.id
)
$data的值['filters']
Array
(
[hotels.star_rating] => 4 stars
[countries.id] => 5
)
pdo抛出异常并失败,错误如下。
sqlstate[hy093]:参数编号无效:未定义参数'
帮忙?
最佳答案
您忘记了:
键中的冒号$data['filters']
。应该是:
Array
(
[:hotels.star_rating] => 4 stars
[:countries.id] => 5
)
关于php - PHP无法动态构建PDO查询。,我们在Stack Overflow上找到一个类似的问题:https://stackoverflow.com/questions/11180224/