Laravel - Revision history

Planetoid: /* SQL 查詢語法 Where 變數部分使用問號 */

2019-08-29T03:32:45Z

SQL 查詢語法 Where 變數部分使用問號

← Older revision		Revision as of 11:32, 29 August 2019
Line 16:		Line 16:
	$query = DB::table("articles")		$query = DB::table("articles")
	->select("content")		->select("content")
	->whereRaw("content LIKE ? ", ['%~~' .~~ $search_keyword ~~. '~~%'])		->whereRaw("content LIKE ? ", ["%$search_keyword%"])
	</pre>		</pre>

Line 23:		Line 23:
	$query = DB::table("articles")		$query = DB::table("articles")
	->select("content")		->select("content")
	->where("content", "LIKE", '%~~' .~~ $search_keyword ~~. '~~%')		->where("content", "LIKE", "%$search_keyword%")
	</pre>		</pre>

Planetoid at 03:14, 29 August 2019

2019-08-29T03:14:58Z

← Older revision		Revision as of 11:14, 29 August 2019
Line 1:		Line 1:
			[https://laravel.com/ Laravel - The PHP Framework For Web Artisans] (繁體中文文件: [https://laravel.tw/ Laravel - 為網頁藝術家創造的 PHP 框架])

	== SQL 查詢語法 Where 變數部分使用問號 ==		== SQL 查詢語法 Where 變數部分使用問號 ==

Planetoid: Created page with " == SQL 查詢語法 Where 變數部分使用問號 == {{exclaim}} "Raw statements will be injected into the query as strings, so you should be extremely careful to not creat..."

2019-08-29T03:11:02Z

Created page with " == SQL 查詢語法 Where 變數部分使用問號 == {{exclaim}} "Raw statements will be injected into the query as strings, so you should be extremely careful to not creat..."

New page

== SQL 查詢語法 Where 變數部分使用問號 ==

{{exclaim}} "Raw statements will be injected into the query as strings, so you should be extremely careful to not create SQL injection vulnerabilities."<ref>[https://laravel.com/docs/5.6/queries#raw-expressions Raw Expressions]</ref>

原始 SQL 查詢語法
<pre>
SELECT `content`
FROM `articles`
WHERE `content` LIKE "%$search_keyword%"
</pre>

使用 Laravel {{kbd | key=whereRaw}} 或 {{kbd | key=orWhereRaw}}，範例代碼
<pre>
$query = DB::table("articles")
->select("content")
->whereRaw("content LIKE ? ", ['%' . $search_keyword . '%'])
</pre>

另一種 Laravel 寫法
<pre>
$query = DB::table("articles")
->select("content")
->where("content", "LIKE", '%' . $search_keyword . '%')
</pre>

相關資料
* [https://stackoverflow.com/questions/25244317/laravel-concat-in-query-where-condition sql - Laravel concat in query (where condition) - Stack Overflow]
* [https://laravel.com/docs/5.6/queries#introduction Database: Query Builder - Laravel - The PHP Framework For Web Artisans] "The Laravel query builder uses PDO parameter binding to protect your application against SQL injection attacks. There is no need to clean strings being passed as bindings."
* [https://laracasts.com/discuss/channels/eloquent/how-do-you-parameterize-whereraw-in-the-query-builder How do you parameterize whereRaw() in the query builder?]

== References ==
<references />

[[Category:PHP]]