using in_array in a query

Question

Problem:

Formats and topics produces arrays derived from an AJAX post

Proposed Solution:

Break the array into individual strings and compare each string with its respective query item using php internal function in_array

However, I am not sure how to implement it.

Below is the code:

  $formatsArray = $_POST['formats'];
  $topicsArray = $_POST['topics'];

I am using in_array because Implode did not work:

  $formats = implode('","', $formatsArray);
   $topics = implode('","', $topicsArray);

   $resources = "select * from resources where
                 stage LIKE '%".$stage."%'
                 AND format IN(".$formats.")
                 AND topic IN(".$topics.") ";

stage is just a string not an array.

I would like to use in-array within the query,

How the array is created (in javscript):

optionScope = $(this);
// Stage 4 option A
var formats = [];
optionScope.data().formats = formats;

stage4_optiona.on('click', function(){

  continue4.css('opacity', '1');
    continue4.on('click', function(){
    optionScope.data().formats.push("Online classroom");

        stage5.show();
        stage4.hide();
    });
});

then post

  <script type='text/javascript'>
        /* attach a submit handler to the form */
$(function(){
  optionScope = $(this);                    // wait until dom is ready

$("#formMail").submit(function(event) {
  /* stop form from submitting normally */
  event.preventDefault();      /* stop form from submitting normally */

          $.ajax({
              url: "functions/contact.php",
              type: "post",
              data: {stage : optionScope.data().stage,
                    topics: optionScope.data().topic,
                    formats: optionScope.data().formats,
                    fname: $('#fname').val(),
                    email: $('#email').val(),
                    humancheck: $('#humancheck').val()
                  },
              success: function (response) {
                  console.log("data sent successfully");

                  window.location = response;


              },
              error: function (xhr, desc, err) {
                  console.log(xhr);
                  console.log("Details: " + desc + "\nError:" + err);
              }
          });
                  });
  });
</script>

Update:

Array( 
  [0] => Videos 
  [1] => Blogs/articles 
  [2] => books
)

Array(
 [0] => idea generation 
 [1] => mindset 
 [2] => psychology
)

i would want to use in_array as oppose to implode because that doesn't work within the query — code_legend, Aug 31 '15 at 15:05
Your problem is not quite clear then. Why would you use `in_array()`? — Jay Blanchard, Aug 31 '15 at 15:06
to check if any of the strings within the array match the respective query item — code_legend, Aug 31 '15 at 15:06
Have you checked to make sure `$formats` and `$topics` are really strings? Are the strings formatted properly for `IN()`? My guess is that you have sent `foo","bar","glorp` (note the missing quotes) to the `IN()` — Jay Blanchard, Aug 31 '15 at 15:07
Use a function like the one mentioned here, it will protect against SQL Injection: http://stackoverflow.com/a/18072387/3112803 — gfrobenius, Aug 31 '15 at 15:09
yes check update . you will see how the array is created and posted. they are both arrays — code_legend, Aug 31 '15 at 15:10
`in_array()` does not create a string - it returns a Boolean. Sending a Boolean to your query would certainly not work. I think you may be confused on terminology. — Jay Blanchard, Aug 31 '15 at 15:13
essentially format or topic can only accept one entry from the list. so if the array has ["Blog", "podcast", "video"] it should only evaluate one at a time, and produce any result that match any one of them not all of them combined — code_legend, Aug 31 '15 at 15:16
i thought of in_array such that if it format matches any item in the array than produce the result of each item matched — code_legend, Aug 31 '15 at 15:37
As @JayBlanchard said - please show us your `print_r($_POST['formats'])` and `print_r($_POST['topics'])` so we'll know the format of your arguments and can help you out on how to parse them. — uri2x, Aug 31 '15 at 16:48
as kindle requested, i have added an update below my initial post that prints the array — code_legend, Aug 31 '15 at 17:03
You are vulnerable to [sql injection attacks](http://bobby-tables.com) — Marc B, Aug 31 '15 at 17:07
thanks for your response mark. i will convert it to prepared statement once i figure this out — code_legend, Aug 31 '15 at 17:09
This is your third time asking the same question, guess you are ignoring the other answers?? — chris85, Aug 31 '15 at 20:39
possible duplicate of [convert an array into individual strings](http://stackoverflow.com/questions/32302633/convert-an-array-into-individual-strings) — chris85, Aug 31 '15 at 20:40

using in_array in a query

0 Answers0