已解决在SQL查询中插入PHP variabel Codeigniter

2017-06-06 43 views -2 likes

-2

我正在使用代码点火器来使用一些查询，这是我的代码到目前为止，我的代码是否正确？已解决在SQL查询中插入PHP variabel Codeigniter

$this->db->select("(SELECT SUM(grand_total) FROM Sales_order WHERE member = '2') - (SELECT SUM(amount) FROM payment WHERE member_id = '2') AS total_sales");

以及如何更改号码2本variabel $这 - >会话级>用户数据（ 'ID'）

谢谢你们

来源

2017-06-06 Ian Putra

from doc https://www.codeigniter.com/userguide3/database/queries.html#query-bindings –

谢谢@HoàngĐăng我会检查一下:) –

回答

试试这个

$this->db->select("(SELECT SUM(grand_total) FROM Sales_order WHERE member = '".$this->session->userdata('ID')."') - (SELECT SUM(amount) FROM payment WHERE member_id = '".$this->session->userdata('ID')."') AS total_sales"');

来源

2017-06-06 04:33:42 shubham715

sql注入？ –

不，它只是SUM查询我的应用程序 –

谢谢你，配合它的工作:)，很好！ –

你可以使用Query Bindings像下面这样自动转义它：

$sql = "(SELECT SUM(grand_total) FROM Sales_order WHERE member = '?') - (SELECT SUM(amount) FROM payment WHERE member_id = '?') AS total_sales"; 
$this->db->query($sql, array($this->session->userdata('ID'),$this->session->userdata('ID')));

来源

2017-06-06 04:39:32

感谢队友，这将是我的替代:) –

已解决在SQL查询中插入PHP variabel Codeigniter

回答

相关问题