Yii2插入查詢與bindparam爲sql注入

Question

我想使用但不工作，請幫助我。

$sql = Yii::$app->db("INSERT INTO posts(name) VALUES(:name)"); 
$sql->bindValues([':name' => 'John']); 
$sql->execute(); 

Answer 1

嘗試創建命令exceute

Yii::$app->db->createCommand('INSERT INTO posts(name) VALUES(:name)') 
      ->bindParam(':name' => 'John')->execute();