php - 如何正确查询MySQL数据库

Question

我正在执行如下所示的 MySql 查询，它可以工作，但我必须添加很多“@”我想知道如何正确执行此操作？

$query="SELECT * FROM `facebook` ORDER by rand() LIMIT 1";
$result=mysql_query(@$query) or die(mysql_error());
$topic = htmlentities(mysql_result(@$result,@$i,"topic"));
$name = htmlentities(mysql_result(@$result,@$i,"name"));
$file = htmlentities(mysql_result(@$result,@$i,"file"));
$description = htmlentities(mysql_result(@$result,@$i,"description"));

这是我如何拼凑输出的:

$params = array(
  "message" => ("". $topic .""),
  "link" => "http://www.example.com",
  "picture" => ("http://www.example.com/facebook/file-uploading/uploads/". $file .""),
  "name" => ("". $name .""),
  "caption" => "WWW.EXAMPLE.COM",
  "description" => ("". $description ."")
);

谢谢

Answer 1

我假设您正在使用 PHP。我在这里经常使用 PDO，这是我通常做的事情。

//PDO Connection
$connection = new PDO("MYSQL:host=localhost; dbname=mydb","userName","password");

//Query
$stmt = $connection->prepare("SELECT * FROM myTable WHERE id = ?");
//Execute query passing in parameter for id
$stmt->execute(array(5));
//Get Result
$result = $stmt->fetchAll(PDO::FETCH_ASSOC);

我曾经使用 msqli，但最近非常喜欢使用 PDO。