傳遞值數組從形式到SQL查詢WHERE IN子句

Question

我有一個具有大量的複選框，這是從唯一值在MySQL表中生成的一種形式：

<form method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>"> 
<?php 
    $query5="SELECT distinct from_user from tracks WHERE uploaded_page='$this_path_short' ORDER BY from_user"; 
    $result5=mysql_query($query5) or die(mysql_error()); 
    while ($row = mysql_fetch_array($result5)) { 
     $from_user = $row['from_user']; 
     echo "<input type=\"checkbox\" name=\"from_user[]\" value=\"AND ".$from_user."\" checked=\"checked\">".$from_user."<br>"; 
    } 
?> 
<input type="submit" name="submit" value="filter"><br> 

我將隨後要通過'from_user'值的數組到另一個MySQL頁面上的查詢。我能得到的值是這樣的：

$names=implode(" ", $_POST['from_user']); 

但我不知道如何將這個數組在下面的MySQL查詢：

$query1="SELECT * FROM tracks WHERE from_user IN **array goes here**)"; 

Answer 1

$query1='SELECT * FROM tracks WHERE from_user IN ('.implode(',',$_POST['from_user']).')'; 

Answer 2

取出AND所以該複選框值的樣子此：

echo "<input type=\"checkbox\" name=\"from_user[]\" value=\"".$from_user."\" checked=\"checked\">".$from_user."<br>"; 
    } 

IN預計逗號分隔值：

$names=implode(",", $_POST['from_user']);  
$query1="SELECT * FROM tracks WHERE from_user IN (".$names."))"; 

!!!!但是：請，請，請用準備好的語句，因爲你的代碼是SQL注入敞開：的 http://php.net/manual/de/mysqli.prepare.php

$mysqli = new mysqli("localhost", "my_user", "my_password", "world"); 

/* check connection */ 
if (mysqli_connect_errno()) { 
    printf("Connect failed: %s\n", mysqli_connect_error()); 
    exit(); 
} 

$result = null; 
$names = implode(",", $_POST['from_user']); 

/* create a prepared statement */ 
if ($stmt = $mysqli->prepare("SELECT * FROM tracks WHERE from_user IN (?)")) { 

    /* bind parameters for markers */ 
    $stmt->bind_param("s", $names); 

    /* execute query */ 
    $stmt->execute(); 

    /* bind result variables */ 
    $stmt->bind_result($result); 

    /* fetch value */ 
    $stmt->fetch(); 

    print_r($result); 

    /* close statement */ 
    $stmt->close(); 
} 

/* close connection */ 
$mysqli->close();