php预编译sql语句,可以批量提交sql,也可以实现防注入
<?php
$dsn='mysql:host=127.0.0.1;port=3306;dbname=bisai';
$username='root';
$password='';
$driver_option=array(
PDO::MYSQL_ATTR_INIT_COMMAND=>'SET NAMES UTF8',
);
$pdo=new PDO($dsn, $username, $password, $driver_option); $sql="insert into `team` values(null,:teamname)"; $stmt=$pdo->prepare($sql);
//绑定
$stmt->bindValue(':teamname', '国安');
//执行
$result=$stmt->execute(); var_dump($result); //批量的方法
$data_list=array(
array('name'=>'上海'),
array('name'=>'北京'),
array('name'=>'南宁'),
array('name'=>'变海'),
array('name'=>'广西'),
array('name'=>'东北') );
foreach ($data_list as $row)
{
//绑定
$stmt->bindValue(':teamname', $row['name']);
//执行
$result=$stmt->execute(); } ?>