一次更新多行。 基于id

Question

I have a variable, $ids It is a , separated string so it can be $ids = "1" or $ids = "1, 3, 7, 8"

What i want to do is update the database based on these values so i have :

   $query = "UPDATE Fields SET Value = '1'   WHERE Id IN '$ids'";

And also:

   $query = "UPDATE Fields SET Value = '1'   WHERE Id '$ids'";

What is the best way to update the database, should i split the string in to an array, and then do a for each loop? or is there a better way?

Answer 1

Save the fact that it's wide open to SQL Injection, this line works for one or many id's:

$query = "UPDATE Fields SET Value = '1'   WHERE Id IN ($ids)";

Now, to keep yourself from SQL Injection attacks, which is obviously up to you, you'd want to explode that array and send multiple update statements like this:

$query = "UPDATE Fields SET Value = '1'   WHERE Id = :Id";