PHP – Using PDO with IN clause array

by

PDO is not good with such things. You need to create a string with placeholders dynamically and insert it into the query, while binding array values the usual way. With positional placeholders it would be like this:

$in  = str_repeat('?,', count($in_array) - 1) . '?';
$sql = "SELECT * FROM my_table WHERE my_value IN ($in)";
$stm = $db->prepare($sql);
$stm->execute($in_array);
$data = $stm->fetchAll();

In case there are other placeholders in the query, you could use the following approach (the code is taken from my PDO tutorial):

You could use array_merge() function to join all the variables into a single array, adding your other variables in the form of arrays, in the order they appear in your query:

$arr = [1,2,3];
$in  = str_repeat('?,', count($arr) - 1) . '?';
$sql = "SELECT * FROM table WHERE foo=? AND column IN ($in) AND bar=? AND baz=?";
$stm = $db->prepare($sql);
$params = array_merge([$foo], $arr, [$bar, $baz]);
$stm->execute($params);
$data = $stm->fetchAll();

In case you are using named placeholders, the code would be a little more complex, as you have to create a sequence of the named placeholders, e.g. :id0,:id1,:id2. So the code would be:

// other parameters that are going into query
$params = ["foo" => "foo", "bar" => "bar"];

$ids = [1,2,3];
$in = "";
$i = 0; // we are using an external counter 
        // because the actual array keys could be dangerous
foreach ($ids as $item)
{
    $key = ":id".$i++;
    $in .= ($in ? "," : "") . $key; // :id0,:id1,:id2
    $in_params[$key] = $item; // collecting values into a key-value array
}

$sql = "SELECT * FROM table WHERE foo=:foo AND id IN ($in) AND bar=:bar";
$stm = $db->prepare($sql);
$stm->execute(array_merge($params,$in_params)); // just merge two arrays
$data = $stm->fetchAll();

Luckily, for the named placeholders we don’t have to follow the strict order, so we can merge our arrays in any order.

More Related Contents:

  1. pdo prepared statements with wildcards
  2. Can I use a PDO prepared statement to bind an identifier (a table or field name) or a syntax keyword?
  3. Insert multiple rows with PDO prepared statements
  4. Replacing mysql_* functions with PDO and prepared statements
  5. PDOstatement (MySQL): inserting value 0 into a bit(1) field results in 1 written in table
  6. Calling stored procedure with Out parameter using PDO
  7. When *not* to use prepared statements?
  8. PDO error: SQLSTATE[HY000]: General error: 2031
  9. WordPress prepared statement with IN() condition
  10. Use of PDO in classes [duplicate]
  11. Error while using PDO prepared statements and LIMIT in query [duplicate]
  12. Insert form in MySQL with PDO [duplicate]
  13. Undefined index $_POST
  14. PDOException “could not find driver”
  15. How to view query error in PDO PHP
  16. PDO with INSERT INTO through prepared statements [closed]
  17. PDO::fetchAll vs. PDO::fetch in a loop
  18. PHP Connection failed: SQLSTATE[HY000] [2002] Connection refused
  19. Resetting array pointer in PDO results
  20. Real escape string and PDO [duplicate]
  21. PHP PDO vs normal mysql_connect
  22. Can I create a database using PDO in PHP?
  23. PHP PDO::bindParam() data types.. how does it work?
  24. PDO::PARAM for type decimal?
  25. PHP PDO and MySQLi [duplicate]
  26. PDO fetch one column from table into 1-dimensional array
  27. Getting a PHP PDO connection from a mysql_connect()?
  28. Having issue with matching rows in the database
  29. PHP: mysql v mysqli v pdo [closed]
  30. PDO and MySQL ‘between’

Leave a Comment