使用php mysql在單個表中進行多項選擇

Question

我試圖從一張表中拉出多行。我試圖拉取所有男性或所有女性在不同的郵政編碼。

<?php 
$zipCodes = array("55555", "66666", "77777", etc...); 

$fetchUser = mysql_query("select * from users where gender = '$_POST[gender]' ".implode(" or zipCode = ", $zipCodes)." order by id desc"); 
while($var = mysql_fetch_array($fetchUser)) { 
    code... 
} 
?> 

Answer 1

您應該使用這個IN，

SELECT ... 
FROM tableName 
WHERE gender = '$_POST[gender]' AND 
     zipCode IN (55555, 6666, 77777) 

目前你的代碼容易受到SQL注入。請PDO或MySQLI延伸閱讀。

Read more on this article: Best way to prevent SQL injection in PHP
PHP PDO: Can I bind an array to an IN() condition?

Answer 2

// Prevent SQL injection for user input 
$fetchUser = mysql_query("select * from users where gender = '".filter_var($_POST[gender], FILTER_SANITIZE_STRING)."' OR zipCode IN (".implode(",", $zipCodes).") order by id desc");)