PHP/MySQL的：动态准备语句插入/更新查询

Question

我发现这个http://net.tutsplus.com/tutorials/php/the-problem-with-phps-prepared-statements/

和它的作品真的很好有它在一个单独的PHP文件，我的其他文件调用与查询作为参数。

是否有可能使其他查询类似插入和更新？

Answer 1

这是更新的例子：

$ params是一个数组。

function insertToDB($params, $db) { //Pass array and db 

     $fields = array(); 
     $conn = new mysqli('localhost', 'root', 'root', 'db') or die('XXX');  
     $stmt = $conn->stmt_init(); 
     $stmt->prepare("SELECT * FROM ".$db); 
     $stmt->execute(); 
     $meta = $stmt->result_metadata(); 
     while ($field = $meta->fetch_field()) { 
      $fields[] = $field->name; 
     } 

     $fields = implode(", ", $fields); 


     $placeholders = implode(',', array_fill(0, count($params), '?')); 

     $types = ''; 
     foreach($params as $value) { 
      $types.= substr(strtolower(gettype($value)), 0, 1); 
     } 

     $ins = "INSERT INTO MYDB (".$fields.") VALUES (".$placeholders.")"; 

     $bind_names[] = $types; 
     for ($i = 0; $i < count($params); $i++) { 
      $bind_name = 'bind' . $i; 
      $$bind_name = $params[$i]; 
      $bind_names[] = &$$bind_name; 
     } 
     if ($stmt->prepare($ins)) { 
       call_user_func_array(array($stmt,'bind_param'),$bind_names); 
       $insresult = $stmt->execute(); 
     } 
     return $insresult; 
     $stmt->close(); 
    }