所以我尝试使用pdo(一个mysql动态查询)来构建和准备。这是我的代码和调试信息。

$allowed_filters = array('hotels.star_rating', 'countries.id');

$where = 'WHERE 1 ';
if (!empty($data['filters'])){
    $where = 'WHERE';
    foreach ($data['filters'] as $field => $value){
        if (in_array($field, $allowed_filters)){
            $where .= " $field = :$field &&";
        }
        else unset($data['filters'][$field]);
    }

    $where = rtrim($where, '&&');
    $where = ($where == 'WHERE')? 'WHERE 1 ' : $where;
}

$st = $this->db->prepare("
    SELECT
        hotels.code,
        hotels.name as name,
        hotels.star_rating,
        hotels.description,
        hotels.cover_image,
        countries.name as country,
        cities.name as city
    FROM
        hotels JOIN cities ON cities.id = hotels.city_id
        join countries on countries.id = cities.country_id
    $where
");

$st->execute($data['filters']);
var_dump($st->fetch());

就在$st->execute($data['filters'])行之前,我转储了$st和$data['filters']。数值如下。
价值$ST
PDOStatement Object
(
    [queryString] =>
        SELECT
            hotels.code,
            hotels.name as name,
            hotels.star_rating,
            hotels.description,
            hotels.cover_image,
            countries.name as country,
            cities.name as city
        FROM
            hotels JOIN cities ON cities.id = hotels.city_id
            join countries on countries.id = cities.country_id
        WHERE
            hotels.star_rating = :hotels.star_rating &&
            countries.id = :countries.id
)

$data的值['filters']
Array
(
    [hotels.star_rating] => 4 stars
    [countries.id] => 5
)

pdo抛出异常并失败,错误如下。
sqlstate[hy093]:参数编号无效:未定义参数'
帮忙?

最佳答案

您忘记了:键中的冒号$data['filters']。应该是:

Array
(
    [:hotels.star_rating] => 4 stars
    [:countries.id] => 5
)

关于php - PHP无法动态构建PDO查询。,我们在Stack Overflow上找到一个类似的问题:https://stackoverflow.com/questions/11180224/

10-11 11:19