PHP中使用$db->select时如何传入多个文件夹ID（如28517）？

Hey there! Let's work through how to pass multiple folder IDs to your $db->select method. Since you're already using this method for a single ID (28517), here are the most common, secure approaches depending on how your custom $db class is structured:

Many custom database classes or ORMs are built to handle array values automatically, converting them into an IN clause with proper placeholders. This is the simplest approach if it works:

// Define your list of folder IDs
$folderIds = [28517, 12345, 67890];

// Use the array directly in your select condition
$result = $db->select(
    'your_target_table', // Replace with your actual table name
    '*', // Specify the fields you need (instead of * if possible)
    ['folder_id' => $folderIds] // The condition: folder_id matches any value in the array
);

Under the hood, well-written classes will turn this into folder_id IN (?, ?, ?) and bind each array value, which keeps your query safe from SQL injection.

If your $db->select requires explicit condition strings, you can generate placeholder markers for each ID and bind the array separately. This is still secure as long as you don't hardcode IDs into the SQL:

$folderIds = [28517, 12345, 67890];

// Create a string of placeholders (e.g., "?, ?, ?")
$placeholders = implode(', ', array_fill(0, count($folderIds), '?'));

// Build your condition statement
$whereClause = "folder_id IN ($placeholders)";

// Execute the select with the condition and bound array
$result = $db->select(
    'your_target_table',
    '*',
    $whereClause,
    $folderIds // Pass the array as the parameter list
);

Important: Never concatenate the IDs directly into the SQL string (like IN (28517,12345)). This exposes you to SQL injection attacks if IDs ever come from user input.

Some database libraries have their own dedicated syntax for IN conditions. For example:

• If it's a framework-specific class (like CodeIgniter's DB utility), you might use a where_in method:

  $folderIds = [28517, 12345, 67890];
  $result = $db->select('*')
               ->from('your_target_table')
               ->where_in('folder_id', $folderIds)
               ->get()
               ->result();
  

• Or a syntax like ['folder_id' => ['IN', $folderIds]] for condition arrays.

If you're unsure, take a quick look at the $db class's source code or internal documentation—this will tell you exactly how it handles multiple values for a single field.

内容的提问来源于stack exchange，提问作者Ninja Anime