PHP PDO – Bind table name? [duplicate]

by

Is it possible to bind a table name?

No.

You have to whitelist table names. I doubt you want to let a user to browse any table from your database.

And you have to format identifiers manually as well.
There is a tag wiki with example. Why not read it first?

Update:
As you can see, PDO turns out to be inconvenient for real life tasks.
So, you have to have a more intelligent abstraction library to handle MySQL queries.
Here is an example using the safeMysql class, which will make your code dramatically shorter:

class form{
    public function __construct($table){
        global $db;
        return $db->getAll("DESCRIBE ?n", $table);
    }
}

2 notes:

  • I’ve removed the second parameter as there is no code in your function that uses it.
  • NEVER connect in the class. Use an already opened connection instead. Or you will kill your MySQL server with so many connects.

Exclude implemented version

class form {
    public function __construct($table,$skip = array("id")){
        global $db;
        $data = array();
        $res = $db->query("DESCRIBE ?n", $table);
        while($row = $db->fetch($res)) {
            if (!in_array($row['Field'],$skip)) {
                $data[] = $row;
            }
        }
        return $data;
    }
}

However, such class seldom can be used as intended – there are always a lot of exceptions and manual formatting to make it usable.

More Related Contents:

  1. PHP / PDO echo data from database into a table
  2. PDO support for multiple queries (PDO_MYSQL, PDO_MYSQLND)
  3. How to prevent duplicate usernames when people register?
  4. Error when preparing a multiple insert query
  5. PDO valid characters for placeholders
  6. Binding multiple values in pdo
  7. PDO Parameterized Query – Reuse named placeholders?
  8. MySQL check if a table exists without throwing an exception
  9. Error logging, in a smooth way
  10. How to read “fetch(PDO::FETCH_ASSOC);”
  11. PDO + MySQL and broken UTF-8 encoding
  12. Is there a way to fetch associative array grouped by the values of a specified column with PDO?
  13. PDOstatement (MySQL): inserting value 0 into a bit(1) field results in 1 written in table
  14. Why is constructing PDO connection slow?
  15. php code to test pdo is available?
  16. When *not* to use prepared statements?
  17. PDO fetchAll group key-value pairs into assoc array
  18. how to properly use while loop in PDO fetchAll
  19. Binding parameters for WHERE IN clause with PDO [duplicate]
  20. PHP 7 RC3: How to install missing MySQL PDO
  21. Fatal error: Call to a member function bindParam() [duplicate]
  22. How to escape single-quote (apostrophe) in string using php
  23. PHP Laravel: No connection could be made because the target machine actively refused it
  24. PDO bindParam into one statement?
  25. PDO Unbuffered queries
  26. escaping column name with PDO
  27. prepared parameterized query with PDO
  28. What is the PDO equivalent of function mysql_real_escape_string?
  29. Installing PDO driver on MySQL Linux server
  30. PDO Exception Questions – How to Catch Them

Leave a Comment