mysql IN parameter

Question

When the user check more than one (checkbox) option which are then combine into a string of "apple,orange,pear"

SELECT id, pos, FROM $db WHERE dtime>='$now' AND jsub IN ('$arr[1]') ;

When I pass the string to $arr[1], it won't work correctly, how do I split into array and get mysql IN function to process correctly?

WHAT value? Got an example? Are you thinking we all has telepathy here? — Your Common Sense
– Your Common Sense, Commented May 22, 2010 at 10:15

aviv · Accepted Answer · 2010-05-22 10:06:16Z

2

use:

    $str = "SELECT id, pos, FROM $db
            WHERE dtime>='$now' AND jsub IN ('".explode(',',$arr."')";

and don't forget to sanitize the parameters before ...

answered May 22, 2010 at 10:06

aviv

2,7947 gold badges36 silver badges48 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

proyb2 Over a year ago

There was a missing bracket, I fix it... However, it doesn't seen to work in my case, nevermind I manage to solve using replace string to add a ' on both side of the comma. $arr[1] = str_replace(",", "','", $arr[1]);

kennytm · Accepted Answer · 2010-05-22 10:08:36Z

1

Use FIND_IN_SET.

SELECT id, pos, FROM $db WHERE dtime>='$now' AND FIND_IN_SET(jsub, '$arr[1]')

answered May 22, 2010 at 10:08

kennytm

526k110 gold badges1.1k silver badges1k bronze badges

Comments

Your Common Sense · Accepted Answer · 2010-05-22 10:14:02Z

0

the question is WAY unclear, but I suspect you want something like

foreach ($arr as $key => $item) $arr[$key] = mysql_real_escape_string($item);
$in = "'".implode("','",$arr);
$sql = "SELECT id, pos, FROM $db WHERE dtime>='$now' AND jsub IN ($in)";

But man, I hate guessing.

Why don't you get yourself a static query, without any PHP code?
To see, if it ever works?
If not - ask on SO for the proper query. SQL query, not PHP code.
If yes - write a PHP code that produces the exact query.
Compare to the example one.
If failed - ask on SO for the PHP code, providing an example of the resulting query and an array.

Is it too hard rules to follow?

edited May 22, 2010 at 10:14

answered May 22, 2010 at 10:06

Your Common Sense

158k42 gold badges226 silver badges373 bronze badges

1 Comment

Your Common Sense Over a year ago

I suspected something of the kind. Lack of debugging, as usual. Home my simple checklist'll help

Collectives™ on Stack Overflow

mysql IN parameter

3 Answers 3

1 Comment

Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

1 Comment

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related