如何正确使用PDO对象进行参数化SELECT查询

您选择像这样的数据：

$db = new PDO("...");$statement = $db->prepare("select id from some_table where name = :name");$statement->execute(array(':name' => "Jimbo"));$row = $statement->fetch(); // Use fetchAll() if you want all results, or just iterate over the statement, since it implements Iterator

您以相同的方式插入：

$statement = $db->prepare("insert into some_other_table (some_id) values (:some_id)");$statement->execute(array(':some_id' => $row['id']));

我建议您将PDO配置为在出错时引发异常。

PDOException

$db

$db = new PDO("...");$db->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);