CodeIgniter的数据库查询

Question

我在我的模型下面的代码：

$sql = "SELECT t1.*, t2.* FROM Table1 t1 INNER JOIN Table2 t2 ON t1.id = t2.id AND t2.title IN (?) AND t1.type = ? ORDER BY t1.id"; 
$q = $this->db->query($sql, array($filter, $type)); 

的问题是，这个查询工作正常，如果：

$filter = 'a'; 

但返回咱这：

$filter = "'a','b','c','d'"; 

因为我可以看到，CI是逃避$过滤器这样的第二种情况：

SELECT t1.*, t2.* FROM Table1 t1 INNER JOIN Table2 t2 ON t1.id = t2.id AND t2.title IN ('\'a\',\'b\',\'c\',\'d\'') AND t1.type = ? ORDER BY t1.id 

Answer 1

这是正确的行为。 CI在将它们发送到MySQL之前会转义引号。你或许应该使用数组用于过滤和构建这样的事情（未测试））

$filter = array('a','b','c'); 
$sql = "SELECT t1.*, t2.* 
    FROM Table1 t1 
    INNER JOIN Table2 t2 
     ON t1.id = t2.id 
     AND t2.title IN (". implode(',', array_fill(0, count($filter), '?')).") 
     AND t1.type = ? 
    ORDER BY t1.id"; 
//edit: check if $filter is not an array (when it is a single value string) 
$filter = is_array($filter) ? $filter : array($filter); 
$q = $this->db->query($sql, array_merge($filter, array($type))); 

你也应该重写查询了一下：

$sql = "SELECT t1.*, t2.* 
    FROM Table1 t1 
    INNER JOIN Table2 t2 
     ON t1.id = t2.id 
    WHERE 
     t2.title IN (". implode(',', array_fill(0, count($filter), '?')).") 
     AND t1.type = ? 
    ORDER BY t1.id";