在使用PDO的查詢中使用傳遞的變量

Question

我想從另一個頁面傳遞變量並將其用於PDO查詢。該變量是記錄添加的日期，我試圖返回所有新記錄。我是否在PDO中使用$ _POST？

<?php 
require_once('globals.php'); 

$date_added = $_POST['date_added']; 

$sth = $dbh->prepare("SELECT * FROM games WHERE date_added > $date_added"); 
$sth->execute(); 

/* Fetch all of the remaining rows in the result set */ 
print("Fetch all of the remaining rows in the result set:\n"); 
$result = $sth->fetchAll(); 
print_r($result); 


?> 

Answer 1

您需要通過在$dbh中創建一個新的PDO對象來實際建立與數據庫的連接。下面的代碼假定數據庫用戶和密碼爲$dbusername, $dbpassword，數據庫的名稱爲$nameofdb。

$date_added在prepare()調用中被替換爲參數:dateadded，然後通過數組傳遞給​​調用。

請仔細閱讀這兩個PDO::__construct()和PDO::execute()

<?php 
require_once('globals.php'); 

// Connect to MySQL via PDO 
try { 
    $dbh = new PDO("mysql:dbname=$nameofdb;host=localhost", $dbusername, $dbpassword); 
} catch (PDOException $e) { 
    echo 'Connection failed: ' . $e->getMessage(); 
} 

$date_added = $_POST['date_added']; 

// Replace `$date_added` with a parameter `:dateadded` 
$sth = $dbh->prepare("SELECT * FROM games WHERE date_added > :dateadded"); 
// bind $date_added and pass it into the execute() call inside an array 
$sth->execute(array('dateadded'=>$date_added)); 

/* Fetch all of the remaining rows in the result set */ 
print("Fetch all of the remaining rows in the result set:\n"); 
$result = $sth->fetchAll(); 
print_r($result); 

?>