mysql statement using a for loop php

Question

I have a mysql query which is being to find the stock items in a certain location belonging to a certain group. Hence this is going through 4 levels of while loops. No i have given the user the ability to select the locations they want to view the stocks from. This is being achieved using checkboxes which are sent using ajax in an array. The array exploded in PHP using $offices = explode(",", $locations);. However now i want to use the locations selected in my mysql query.

$location are in the form of location1, location2, location3, location4

//selecting all locations using the statement below, however i want to select the locations that where selected by user.

$sql4 = mysql_query("select OfficeID, OfficeTitle from Office where 'wanted locations');
    while($row3 = mysql_fetch_array($sql4)) {
        $curr_location = $row3[0];

        $sql3 = mysql_query("select Quantity from Stock_Management where Book_ID = '$curr_book' and Location_ID = '$curr_location'");
        while($row3 = mysql_fetch_array($sql3)) {
            echo "<td>".$row3[0]."</td>";
        }   
    }
    echo "</tr>";

I want to select the locations based on the selected locations by user, now this can be achievable using a for loop by i don't know how to include that in my sql query!

in the commented area of the code. I want to select the locations in that sql query based on the selected locations by user. — Namit
– Namit, Commented Mar 17, 2012 at 13:18
@PaulDinh Lol, just removed the extra bits that were not required. — Namit
– Namit, Commented Mar 17, 2012 at 13:21

Your Common Sense · Accepted Answer · 2012-03-17 13:57:46Z

1

$locations = mysql_real_escape_string($locations);
$locations = str_replace(",","','",$locations);

$sql = "select OfficeID, OfficeTitle from Office WHERE location in ('$locations')";

answered Mar 17, 2012 at 13:57

Your Common Sense

158k42 gold badges226 silver badges373 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Namit · Accepted Answer · 2012-03-17 13:51:22Z

1

$offices = explode(",", $locations);
$loc =  implode("','", $offices);

This helps is creating the variable $loc to location1','location2',location3

$sql4 = mysql_query("select OfficeID, OfficeTitle from Office where OfficeTitle IN ('$loc')");

This creates the mysql query to be:

$sql4 = mysql_query("select OfficeID, OfficeTitle from Office where OfficeTitle IN ('location1','location2',location3')");, which solves the purpose for now.

answered Mar 17, 2012 at 13:51

Namit

1,3228 gold badges20 silver badges37 bronze badges

Comments

Straseus · Accepted Answer · 2012-03-17 13:21:59Z

-1

SELECT OfficeID, OfficeTitle FROM Office WHERE OfficeID IN ( $locations ); ??

Also, look up mysql_real_escape_string and 'separation of concerns`

answered Mar 17, 2012 at 13:21

Straseus

4781 gold badge4 silver badges14 bronze badges

7 Comments

Your Common Sense Over a year ago

how mysql_real_escape_string can help here?

Straseus Over a year ago

It won't help with your solution. But it helps protect your application. Don't write your queries without it.

Your Common Sense Over a year ago

how mysql_real_escape_string can help to protect this application?

Your Common Sense Over a year ago

"look it up" is not an answer. -1.

Straseus Over a year ago

You're expected to do some research yourself instead of me explaining the concept of protecting queries to you.

|

Collectives™ on Stack Overflow

mysql statement using a for loop php

3 Answers 3

Comments

Comments

7 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

7 Comments

Your Answer

Sign up or log in

Post as a guest

Related