使用准备好的语句时如何将参数传递给“WHERE IN”查询？

Question

我已经尝试解决这个问题好几天了，但似乎找不到解决方案。

我正在使用 Laravel 并尝试执行具有多个“WHERE”和“WHERE IN”子句的 Mysql 查询，但如果单个“WHERE IN”包含多个值，则查询会由于添加引号而失败围绕整个参数。

我将参数作为字符串传递。如果它包含一个值，它可以正常工作，但当它包含多个时会失败。

$arrival_location = "PALMA"; // WORKS

$arrival_location = "PALMA, BEIJING"; // FAILS

我尝试了几种不同的方式传递参数，但都无济于事。

北京帕尔马

'帕尔马'，'北京'

“‘帕尔马’，‘北京’”

这是查询...

$travel_data = DB::select(DB::raw('SELECT sd.FlightNumber, c1.Country as ArrivalCountry, c1.CityName as ArrivalCity, c2.Country as DepartureCountry, c2.CityName as DepartureCity, a.AirlineName, c1.LatDeg, c1.LonDeg, tp.emergency_name, tp.emergency_relation, tp.emergency_address_line_1, tp.emergency_address_line_2,tp.emergency_city, tp.emergency_country, tp.emergency_post_code, tp.emergency_landline_number, tp.emergency_mobile_number
FROM (SELECT max(PnrBfVersion) as pnrversion, TransactionsID, RecordLocator as recordlocator FROM transactions GROUP BY RecordLocator) as max
JOIN transactions t
ON max.pnrversion = t.PnrBfVersion AND max.recordlocator = t.RecordLocator
LEFT JOIN transaction_details td
ON t.TransactionsID = td.TransactionsID
LEFT JOIN segment_details sd
ON td.TransactionDetailsID = sd.TransactionDetailsID
LEFT JOIN cities c1
ON sd.ArrivalCityCode = c1.CityCode
LEFT JOIN cities c2
ON sd.DepartureCityCode = c2.CityCode
LEFT JOIN airlines a
ON sd.CarrierCode = a.AirlineCode
JOIN traveller_profiles tp
ON td.TravellerID = tp.id
WHERE TravellerID IN (SELECT id FROM traveller_profiles WHERE assigned_manager = ?)
AND TravelType = "10" AND transactionStatus = "T" # Air only and Ticketed data only
AND ArrivalInfo < ?
AND (tp.passenger_first_name LIKE ? OR tp.passenger_last_name LIKE ? OR c1.CityName IN (?) OR c1.Country IN (?) OR c2.CityName IN (?) OR c2.Country IN (?) OR FlightNumber IN (?) OR AirlineName IN (?))'),
array($user_id,
$to_date,
$search_query."%",
$search_query."%",
$arrival_location,
$arrival_country,
$departure_location,
$departure_country,
$flight_number,
$supplier));

在检查 MySQL 日志时，我可以看到它在整个参数周围添加了引号。

AND (tp.passenger_first_name LIKE 'placeholder%' OR tp.passenger_last_name LIKE 'placeholder%' OR c1.CityName IN ('PALMA, BEIJING CAPITAL') OR c1.Country IN ('') OR c2.CityName IN ('') OR c2.Country IN ('') OR FlightNumber IN ('') OR AirlineName IN (''))

添加我自己的引号时，它会在查询中添加斜杠...

AND (tp.passenger_first_name LIKE 'placeholder%' OR tp.passenger_last_name LIKE 'placeholder%' OR c1.CityName IN ('\'PALMA\', \'MALTA\'') OR c1.Country IN ('') OR c2.CityName IN ('') OR c2.Country IN ('') OR FlightNumber IN ('') OR AirlineName IN (''))

Answer 1

您不能传入单个参数并使其表示 SQL 语句中的列表。对于此查询，您可以替换：

c1.CityName IN (?)

与：

find_in_set(c1.CityName, ?) > 0

在某些情况下，这不是一个好主意，因为它会阻止使用索引。在您的查询中，该where 子句不太可能使用索引。

Answer 2

我认为您的查询是错误的。什么是 DB::select(DB::raw ??

我从未见过在 laravel 中使用 DB::select。我通常会这样做：

DB::table('table')
            ->join('another_table', 'table.id', '=', 'another_table.another_id')
            ->join('yet_another_table', 'table.id', '=', 'yet_another_table.yet_another_id')
            ->select('table.col', 'another_table.col', 'yet_another_table.col')
            ->get();

您可以将变量（不带引号）传递给您的连接语句。

这里有一些文档：

http://laravel.com/docs/5.0/queries