2017-06-06 34 views
-2

我正在使用代碼點火器來使用一些查詢,這是我的代碼到目前爲止,我的代碼是否正確?已解決在SQL查詢中插入PHP variabel Codeigniter

$this->db->select("(SELECT SUM(grand_total) FROM Sales_order WHERE member = '2') - (SELECT SUM(amount) FROM payment WHERE member_id = '2') AS total_sales"); 

以及如何更改號碼2本variabel $這 - >會話級>用戶數據( 'ID')

謝謝你們

+0

from doc https://www.codeigniter.com/userguide3/database/queries.html#query-bindings –

+0

謝謝@HoàngĐăng我會檢查一下:) –

回答

0

試試這個

$this->db->select("(SELECT SUM(grand_total) FROM Sales_order WHERE member = '".$this->session->userdata('ID')."') - (SELECT SUM(amount) FROM payment WHERE member_id = '".$this->session->userdata('ID')."') AS total_sales"'); 
+0

sql注入? –

+0

不,它只是SUM查詢我的應用程序 –

+0

謝謝你,配合它的工作:),很好! –

0

你可以使用Query Bindings像下面這樣自動轉義它:

$sql = "(SELECT SUM(grand_total) FROM Sales_order WHERE member = '?') - (SELECT SUM(amount) FROM payment WHERE member_id = '?') AS total_sales"; 
$this->db->query($sql, array($this->session->userdata('ID'),$this->session->userdata('ID'))); 
+0

感謝隊友,這將是我的替代:) –