CODEWITHSUNDEEP
phpmysqlpostgresqlbinding
Robert Gould
Robert Gould

Reputation: 69913

How to bind SQL variables in PHP?

I want to bind variables instead of just building SQL strings. Anyway to do this in Php?

Either MySQL or PostgreSQL answers would help.

Thanks

Upvotes: 3

Views: 26586

Answers (4)

Milen A. Radev
Milen A. Radev

Reputation: 62673

For Postgres specifically - pg_query_params (and pg_send_query_params) is the most primitive form of binding but still very useful.

And then there's PDO but the others already mentioned it.

Upvotes: 2

sp.
sp.

Reputation: 1326

You should read on the MySQL Improved Extension (MySQLi) at http://php.net/manual/en/book.mysqli.php , and on prepared statements

Upvotes: 4

Corey Ballou
Corey Ballou

Reputation: 43547

There are a couple of flavors. I believe the more savvy individuals here will push for you to use PDO prepared statements. There is also a sprintf() version.

PDO

An answer has already been discussed on StackOverflow here.

SPRINTF

$sql = sprintf('SELECT * FROM table WHERE id = %d AND field = %s',
               $id,
               mysql_real_escape_string($value));

Upvotes: 0

VolkerK
VolkerK

Reputation: 96189

There's e.g. PDO.
An introduction to pdo and prepared statements (including bound parameters) is located at http://docs.php.net/pdo.prepared-statements

Upvotes: 8

Related Questions