PHP/PDO: Prepared statements don't work when creating a table?

前端 未结 2 1562
一生所求
一生所求 2020-12-21 03:52

When I am using a PDO prepared statement, and use it to plug in a table name to the query it fails, a quick example:

$stmt = $dbh->prepare(\"CREATE TABLE          


        
相关标签:
2条回答
  • 2020-12-21 04:00

    If you are creating a table dynamically, that most likely means you do not understand relational database ideology and as a result doing something wrong.
    Just create all the tables at application setup from ready made dump and do not create any tables at runtime.

    No need to use dynamic table name at all.

    0 讨论(0)
  • 2020-12-21 04:21

    I can find nothing clear in the manual, but looking at the User Contributed Notes, the use of parameters is intended for actual values only, not table names, field names etc.

    Normal string concatenation should (and can) be used.

    $tablename = "tablename";
    $stmt = $dbh->prepare("CREATE TABLE `$tablename` (id foo, int bar,...)");
    
    0 讨论(0)
提交回复
热议问题