I have an array called $restaurantArray which contains a selection of restaurant id's.
Is there anyway I can execute a mysql query that will return rows if their id is equal to one of these restaurant ID's in the array?
Thanks.
Asked
Active
Viewed 1,844 times
0
sark9012
- 5,485
- 18
- 61
- 99
-
1Have you tried anything yet? If so, please show that, as well as how you're interacting with the database. – Daedalus Apr 19 '13 at 20:20
-
This might be useful: http://stackoverflow.com/a/11181663/1208233 – Yang Apr 19 '13 at 20:59
1 Answers
1
You can use IN with your mysql query. Just implode the array $restaurantArray into the string, using comma as a delimiter; cover this string with brackets; and use the result string as input to the query. Something like
// uncomment if data needs to be sanitized
// $restaurantArray = array_map("mysql_real_escape_string", $restaurantArray);
$input = '(' . implode(',', $restaurantArray) . ')';
$query = "SELECT from foo WHERE id IN $input";
-
2
-
How is it vulnerable to such attacks if the array comes directly from the database! – sark9012 Apr 19 '13 at 20:32
-
Use this snippet before the DB query. foreach($restaurantArray as $key=>$value) { $restaurantArray[$key] = mysql_real_escape_string($value); } – Ankesh Apr 19 '13 at 20:33
-
1
-
Seeing `mysql_real_escape_string` is a sign you're doing this wrong. Please use something current like PDO or mysqli. – tadman Apr 19 '13 at 20:34
-
-
@Ankesh - how would I alter this to randomly select 3 values and 3 values only? – sark9012 Apr 19 '13 at 20:36
-
-
-
1You'd use $query = "SELECT from foo WHERE id IN $input ORDER BY RAND() LIMIT 3"; – Connor Gurney Apr 19 '13 at 22:28