带有SQL语句的PHP数组值

Question

在PHP中，我想执行一个SQL查询，将SQL数组值与SQL语句一起传递。我无法做到这一点。

请考虑以下

$db = "mydatabase.sqlite"; 
$array = array(
       "key1" => "value1", 
       "key2" => "value2", 
       "key3" => "value3" 
     ); 

try { 

    $dbhandle = new PDO("sqlite:$db"); 
    $dbhandle->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); 

    foreach ($array as $item) { 

     $timestamp = 
     $dbhandle->exec(
       "INSERT OR REPLACE INTO table (field1, field2, field3) 
        VALUES ('$item['key1']', '$item['key2']', '$item['key3']')" 
      ); 
     $dbhandle = NULL; 

    } 

    } 

catch(PDOException $e) { 
    print "Exception : ".$e->getMessage()."\n"; 
    } 

如何表达的SQL语句？

Answer 1

当插值数组元素连接成一个字符串，不要把引号围绕重点：

  "INSERT OR REPLACE INTO table (field1, field2, field3) 
       VALUES ('$item[key1]', '$item[key2]', '$item[key3]')" 

，或者使用“复杂”的语法与花括号：

  "INSERT OR REPLACE INTO table (field1, field2, field3) 
       VALUES ('{$item['key1']}', '{$item['key2']}', '{$item['key3']}')" 

然而，这将更好地使用准备好的语句：

$stmt = $dbhandle->prepare("INSERT OR REPLACE INTO table (field1, field2, field3) 
          VALUES (:key1, :key2, :key3)"); 
$stmt->execute($item);