Create SQL from array

Question

I'm trying to create a SQL Query that gets data from my DB depending on what the array includes.

Example:

My array includes 1, 2, 3 then the query should be SELECT * FROM v WHERE category='1' OR category='2' OR category='3'.

Does anyone know a way to achieve this?

Any tips are welcome.

UPDATE:

Using MySQL as DB.

are you not getting desired result as per your given query ? — Hamza Zafeer, Jun 24 '16 at 13:41
@HamzaZafeer The query should work. I just need some help creating the query from my array — Chris, Jun 24 '16 at 13:42

score 4 · Accepted Answer · answered Jun 24 '16 at 13:40

4

You can use implode function and IN clause as

$sql="SELECT * FROM v WHERE category IN ('".implode("','", $your_array)."')";

answered Jun 24 '16 at 13:40

Saty

22,213
7
30
49

score 2 · Answer 2 · edited May 23 '17 at 12:08

2

I would take a look at https://stackoverflow.com/a/14767572/755949, which uses placeholders and PDO to add the parameters to your query. Going with Saty's answer you could risk ending up with a SQL injection.

edited May 23 '17 at 12:08

Community

1
1

answered Jun 24 '16 at 13:45

Rob

2,346
1
19
40

I'm using PDO at my DB class. All data is sanitized – Chris Jun 24 '16 at 13:47
1

FYI I don't know how you santize the data. If you concat a SQL query, with unsantized data, and pass that query to PDO then PDO won't do any sanitizing for you. – Rob Jun 24 '16 at 14:14
The DB class sanitizes the data. – Chris Jun 24 '16 at 14:15

score 0 · Answer 3 · answered Jun 24 '16 at 13:45

0

$where = 'WHERE category="' . implode('" OR category="', $array) . '"';

answered Jun 24 '16 at 13:45

newage

841
7
18

score 0 · Answer 4 · answered Jun 24 '16 at 15:35

0

You can also try:

$sql = "SELECT * FROM v WHERE ( FIND_IN_SET(".implode("','", $your_array).", category) ) ";

For more info about FIND_IN_SET: http://www.w3resource.com/mysql/string-functions/mysql-find_in_set-function.php

answered Jun 24 '16 at 15:35

HarisH Sharma

1,009
1
11
34

Create SQL from array

4 Answers4