だから私は動的にmysqlクエリであるPDOを使用してビルドして準備しようとしています。これが私のコードとデバッグ情報です。
$allowed_filters = array('hotels.star_rating', 'countries.id');
$where = 'WHERE 1 ';
if (!empty($data['filters'])){
$where = 'WHERE';
foreach ($data['filters'] as $field => $value){
if (in_array($field, $allowed_filters)){
$where .= " $field = :$field &&";
}
else unset($data['filters'][$field]);
}
$where = rtrim($where, '&&');
$where = ($where == 'WHERE')? 'WHERE 1 ' : $where;
}
$st = $this->db->prepare("
SELECT
hotels.code,
hotels.name as name,
hotels.star_rating,
hotels.description,
hotels.cover_image,
countries.name as country,
cities.name as city
FROM
hotels JOIN cities ON cities.id = hotels.city_id
join countries on countries.id = cities.country_id
$where
");
$st->execute($data['filters']);
var_dump($st->fetch());
$ st-> execute($ data ['filters'])という行の直前に$stと$data['filters']をダンプしました。値は次のとおりです。
$stの値
PDOStatement Object
(
[queryString] =>
SELECT
hotels.code,
hotels.name as name,
hotels.star_rating,
hotels.description,
hotels.cover_image,
countries.name as country,
cities.name as city
FROM
hotels JOIN cities ON cities.id = hotels.city_id
join countries on countries.id = cities.country_id
WHERE
hotels.star_rating = :hotels.star_rating &&
countries.id = :countries.id
)
$data['filters']の値
Array
(
[hotels.star_rating] => 4 stars
[countries.id] => 5
)
PDOは例外をスローし、次のエラーで失敗します。
SQLSTATE [HY093]:無効なパラメーター番号:パラメーターが定義されていません'
ヘルプ?