如何使用mysqli_real_escape_string轉義單引號？

Question

我的代碼是這樣的：

我的城市的數組（echo '<pre>';print_r($city);echo '</pre>';die();）：

Array 
(
    [0] => Array 
     (
      [CityCode] => 14879 
      [CityName] => Soldeu 
     ) 

    [1] => Array 
     (
      [CityCode] => 14881 
      [CityName] => Ari'nsal 
     ) 

    [2] => Array 
     (
      [CityCode] => 14882 
      [CityName] => El Tarter 
     ) 

    [3] => Array 
     (
      [CityCode] => 14883 
      [CityName] => Grau Roig 
     ) 

    [4] => Array 
     (
      [CityCode] => 175198 
      [CityName] => Llorts 
     ) 

) 

在城市代碼：14881，城市名稱：Ari'nsal

它在字符串單引號。

我嘗試這樣的代碼：

$date = date('Y-m-d H:i:s'); 

      $sql = "INSERT INTO hotel_search_city (nation_code, city_code, city_name, created_at, updated_at) values "; 

      $valuesArr = array(); 
      foreach($city as $row){ 

       $nation_code = $value->nation_code; 

       $city_code = $row['CityCode']; 
       $city_name = mysqli_real_escape_string($row['CityName']); 
       $created_at = $date; 
       $updated_at = $date; 

       $valuesArr[] = "('$nation_code', '$city_code', '$city_name', '$created_at', '$updated_at')"; 
      } 

      $sql .= implode(',', $valuesArr); 

      $query = $sql; 
      $this->db->query($query); 

存在着錯誤是這樣的：消息：mysqli_real_escape_string（）恰好預計2個參數1中給出....

任何解決方案來解決我的問題呢？

非常感謝您

Answer 1

$date = date('Y-m-d H:i:s'); 
$sql = "INSERT INTO hotel_search_city (nation_code, city_code, city_name, created_at, updated_at) values (?, ?, ?, ?, ?)"; 

foreach ($city as $row) { 
    $nation_code = $value->nation_code; 
    $city_code = $row['CityCode']; 
    $city_name = $row['CityName']; 
    $created_at = $date; 
    $updated_at = $date; 

    $fields = array($nation_code, $city_code, $city_name, $created_at, $updated_at); 
    $this->db->query($query, $fields); 
} 

或者如果你沒有使用面向對象的語法

$date = date('Y-m-d H:i:s'); 

foreach ($city as $row) { 
    $fields = array(
     'nation_code' => $value->nation_code, 
     'city_code' => $row['CityCode'], 
     'city_name' => $row['CityName'], 
     'created_at' = $date, 
     'updated_at' = $date 
    ); 

    $this->db->insert('hotel_search_city', $fields); 
}