PDO - Selecting Columns coming from POST/Parameter

Question

Is it possible to have this function:

function getProjectData($uid, $what) {
    $sql = "SELECT ? FROM projects WHERE fid = ?";
    $stmt = $this->db->prepare($sql);
    $stmt->execute(array($uid,$what);
    return $stmt->fetch(PDO::FETCH_LAZY);
}

"uid" is the user id and "what" would be the column I want e.g. "title" so the query would be:

SELECT title FROM projects WHERE fid = 1

Is this possible?

score 1 · Accepted Answer · edited May 23 '17 at 12:28

1

Table and Column names cannot be replaced in PDO:

Take a look here: Can PHP PDO Statements accept the table or column name as parameter?

edited May 23 '17 at 12:28

Community

1
1

answered Oct 30 '13 at 11:48

puelo

5,464
2
34
62

score 1 · Answer 2 · answered Oct 30 '13 at 11:49

function getProjectData($uid) {
    $sql = "SELECT * FROM projects WHERE fid = ?";
    $stmt = $this->db->prepare($sql);
    $stmt->execute(array($uid);
    return $stmt->fetch();
}

call it this way

$proj_data = getProjectData($uid);

and then get desired properties as

$title = $proj_data[$what];

PDO - Selecting Columns coming from POST/Parameter

2 Answers2