Place checked checkbox array in sql statement

Question

I am making a checkbox filter, I need to place the associative array chosen from the chekboxes in the sql statement so that in this case it shows the results of these two categories but I have not yet been able to achieve it if you can help me thanks

$array_category = array(
"1" => "design",
"2" => "food",

);

if ($sentence= $db->query("SELECT * FROM post WHERE state = 1  AND category IN ".implode(",", $array_category).")"){

It should be "SELECT * FROM post WHERE state = 1 AND category IN ('".implode("','", $array_category)."')" — Ngo Tuan
– Ngo Tuan, Commented Nov 30, 2020 at 3:24

Ngo Tuan · Accepted Answer · 2020-11-30 03:42:29Z

1

It should be

"SELECT * FROM post WHERE state = 1  AND category IN ('".implode("','", $array_category)."')"

Update 1: For sql injection

\DB::select(\DB::raw("SELECT * FROM post WHERE state = 1 AND category IN (" . str_repeat("?,",count($array_category)-1) . "?" . ")"), $array_category)

edited Nov 30, 2020 at 3:42

answered Nov 30, 2020 at 3:26

Ngo Tuan

2051 gold badge2 silver badges16 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Cully Over a year ago

This is vulnerable to SQL injection.

Ngo Tuan Over a year ago

I just only correct Razer 's sql syntax error

Cully Over a year ago

Right, but apparently the OP is unaware of that as well.

Collectives™ on Stack Overflow

Place checked checkbox array in sql statement

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related