how to add apostrophe in string

Question

I had a value like this $x = 'LA1,LA2,LA3,LA7';

And I want to this value to be execute in my sql. I know it will return error because missing '' in each id's. example 'LA1','LA3','LA7' How to add this symbol so query can execute? Any idea?

$sql = 'SELECT * FROM tbl WHERE id IN ("'.$x.'")';

yes.. the id's in the table. basically I need to retuen `$x` like this `'LA1','LA3','LA7'`. but i had no idea how to do it — Nixoderm, Dec 27 '19 at 07:16
You should probably use prepared statements instead, especially if that input isn't 100% controlled / can come from your users. [Here's a question](https://stackoverflow.com/questions/920353/can-i-bind-an-array-to-an-in-condition) giving you solutions to do this in your case. — Jeto, Dec 27 '19 at 08:32

score 1 · Accepted Answer · answered Dec 27 '19 at 07:18

1

Using a combination of explode and implode ought to work

$x = 'LA1,LA2,LA3,LA7';
$sql = sprintf('SELECT * FROM tbl WHERE id IN ("%s")', implode( '","', explode(',',$x) ) );

answered Dec 27 '19 at 07:18

Professor Abronsius

33,063
5
32
46

seem this method return the result. but what is `%s` mean? – Nixoderm Dec 27 '19 at 07:26
It's a placeholder for the string replacement used by the likes of `printf`, `sprintf` `vsprintf` etc – Professor Abronsius Dec 27 '19 at 07:31

score 1 · Answer 2 · answered Dec 27 '19 at 08:44

1

Ill suggest to put in array rather than keeping it in a string,

$variables = array('apple','orange','kiwi');
$variables = implode("','",$variables );

$sql = 'SELECT * FROM tbl WHERE id IN ('{$variables}')';

answered Dec 27 '19 at 08:44

Thamil Vaanan

11
2

how to convert `$x = 'LA1,LA2,LA3,LA7';` into an array first? – Nixoderm Dec 27 '19 at 08:46

Saf · Answer 3 · 2019-12-27T07:31:34.993

0

split it to array then add apostrophe

$x = 'LA1,LA2,LA3,LA7';
$arrayX = explode(',', $x);
$sql = 'SELECT * FROM tbl WHERE id IN ("'.implode('",', $arrayX).'")';

edited Dec 27 '19 at 07:31

answered Dec 27 '19 at 07:17

Saf

318
3
13

I try this method but still return null – Nixoderm Dec 27 '19 at 07:26

Devsi Odedra · Answer 4 · 2019-12-27T07:17:30.453

-1

You need explode() and join()

$x = 'LA1,LA2,LA3,LA7';
$x = explode(",", $x);
$x= join("', '", $x);
$sql = "SELECT * FROM tbl WHERE id IN ('$x')";

edited Dec 27 '19 at 07:17

answered Dec 27 '19 at 07:12

Devsi Odedra

5,244
1
23
37

@YasinPatel we can use explode and join – Devsi Odedra Dec 27 '19 at 07:18

how to add apostrophe in string

4 Answers4