Array in SQL Query? [duplicate] - php

Question

This question already has answers here:
Passing an array to a query using a WHERE clause
(17 answers)
Closed 8 years ago.
i have a problem making a SQL Query with an array in my WHERE clause.
For example:
My Array:
$myarray[1] = "hi";
$myarray[2] = "there";
$myarray[3] = "everybody";
My MySQL Statement:
SELECT * FROM myTable WHERE title='".$myarray[]."'
Is there any way to realize that?
I solved it myself like this:
for(...) {
$where = $where." title='".$myarray[$count]."' OR ";
}
$where = substr($where , 0, -3);
.....
SELECT * FROM myTable WHERE ".$where."
But if i had thousands of entries in my array, the SQL Statement would be too big and slow, right?
Thanks

Answer 1

You can use mysql's IN-function
EDIT: As amosrevira said, you need to escape you strings in the array.
$myarray[1] = "'hi'";
$myarray[2] = "'there'";
$myarray[3] = "'everybody'";
$newarray = implode(", ", $myarray); //makes format 'hi', 'there', 'everybody'
SELECT * FROM myTable WHERE title IN ($newarray);

Answer 2

$myarray[1] = "hi";
$myarray[2] = "there";
$myarray[3] = "everybody";
//every quoted string should be escaped according to SQL rules
foreach($myarray as $key => $val) {
$myarray[$key] = mysql_real_escape_string($val);
}
$in_str = "'".implode("', '", $myarray)."'"; //makes format 'hi', 'there', 'everybody'
SELECT * FROM myTable WHERE title IN ($in_str);

Answer 3

You can try use of IN in your WHERE clause,
SELECT * FROM myTable WHERE title IN ('hi', 'there', 'everybody');
or
SELECT * FROM myTable WHERE title IN ('.implode(',', $myarray).');

Answer 4

You can us the IN operator. You want it to look like:
title IN ('hi', 'there', 'everybody')
So you'd do something like:
$sql = "SELECT * FROM myTable WHERE title IN '" . implode("','", $myarray) . "';"
Note that you need to filter your array for SQL injection issues first.