Passing an array to mysql [duplicate]

Answer 1

Use a SQL IN operation:

$sql = 'SELECT * FROM business WHERE business_id IN (' . implode(',', $values) . ')';
$rs = mysql_query($sql);

Note: If the values come from the client they should be sanitized, either with mysql_real_escape_string() or, because these are numbers, you could use intval(). For example:

$ids = array_map('intval', $values);
$sql = 'SELECT * FROM business WHERE business_id IN (' . implode(',', $ids) . ')';
$rs = mysql_query($sql);

Answer 2

You could join the array using a comma as the separator, and use the SQL IN statement.

$businessIds = join(",", $array);
$q = "select * from business where business_id IN ($businessIds)";
$rs = mysql_query($q);

Answer 3

$ids = array(1, 2, 3, 4);

$ids = join(', ', $ids);
$query = "SELECT * FROM business WHERE business_id IN ($ids)";
// $query => SELECT * FROM business WHERE business_id IN (1, 2, 3, 4)

The usual SQL injection warnings still apply, you may want to loop through the ids first to validate or escape them. Also, if you expect strings instead of numbers, use this:

$ids = array('a', 'b', 'c', 'd');

$ids = join("', '", $ids);
$query = "SELECT * FROM business WHERE business_id IN ('$ids')";
// $query => SELECT * FROM business WHERE business_id IN ('a', 'b', 'c', 'd')