PHP从SELECT查询和变量插入数据

Question

I'm using PHP Oracle. Is it possible to insert data from SELECT query and variable?

$dataValue = "U0001";

$qInsert = oci_parse($c1, "
    INSERT INTO TBLDATA(DATAID, DATAVALUE)
    SELECT DATAID_FK FROM TBLACCESSDATA
");
oci_execute($qInsert);

So I want DATAID will be insert by SELECT query and DATAVALUE from $datavalue

Answer 1

This should work:

$qInsert = oci_parse($c1, "
    INSERT INTO TBLDATA(DATAID, DATAVALUE)
    SELECT DATAID_FK,$datavalue FROM TBLACCESSDATA
");

A better way is to use prepared statements:

$qInsert = oci_parse($c1, "
    INSERT INTO TBLDATA(DATAID, DATAVALUE)
    SELECT DATAID_FK,:datavalue FROM TBLACCESSDATA
");
oci_bind_by_name($qInsert, ':datavalue', $datavalue, -1); 

It is better, because it prevents SQL-injection.