How to insert multiple rows in a mysql database at once with prepared statements?

Question

I am trying to use staticsan´s answer in this question for prepared statements. Lets take this example:

$stmt = $mysqli->prepare("INSERT INTO something (userid, time, title) VALUES (?, ?, ?)");
$stmt->bind_param('iis', $userid, time(), $title);
$stmt->execute();

In staticsan´s answer imploding the array is adding all the values into the mysql statement so that in the end we can insert multiple data into the database with just one statement. How would this be done in my example?

Your example has a fixed number of parameters, so it's already solved. Can you elaborate your problem a bit more? What have you tried so far? It should basically work the same but adding more parameters, e.g. in a `foreach` loop. — hakre, Dec 02 '11 at 20:14
You can form prepared statement using code as mentioned here, http://stackoverflow.com/questions/1176352/pdo-prepared-inserts-multiple-rows-in-single-query — Hemant Thorat, Aug 30 '16 at 11:53

score 9 · Accepted Answer · answered Dec 02 '11 at 20:18

9

This is completely valid:

$stmt = $mysqli->prepare("INSERT INTO something (userid, time, title) VALUES (?, ?, ?)");

$stmt->bind_param('iis', $userid, time(), $title);
$stmt->execute();

$stmt->bind_param('iis', $userid, time(), $title);
$stmt->execute();

$stmt->bind_param('iis', $userid, time(), $title);
$stmt->execute();

$stmt->bind_param('iis', $userid, time(), $title);
$stmt->execute();

You can foreach over your array of values to insert and bind and execute each time. It wont be quite as fast as the bulk insert in the example you linked, but it will be more secure.

answered Dec 02 '11 at 20:18

Jonathan Rich

1,740
10
11

3

Thanks, that works. But the execute() will be executed for each array element, so each row will be inserted into the database separately and not all at the same time. Am I right? I was hoping to see a solution where you bind_param first all the values and at the very end execute it once. – Chris Dec 02 '11 at 20:31
Yes, that's correct, but the main advantage is the speed increase provided by the prepared statement - preparing the statement once and running in multiple times is much faster than preparing it each time. – Jonathan Rich Dec 02 '11 at 20:38
4

This is still tons slower than a good old static `INSERT` query though, isn't it? I mean, executing queries in a loop creates a ~2ms delay between every query. With big arrays this would take forever, no? – NoobishPro Feb 04 '18 at 02:28

score 3 · Answer 2 · edited Jul 09 '19 at 16:59

You can build prepared statement using code as mentioned here,

PDO Prepared Inserts multiple rows in single query

PHP logic will be sort of like,

/**
 * Insert With Ignore duplicates in Mysql DB.
 */
public static function insertWithIgnore($em, $container, $tableName, $fields, $rows)
{
    $query = "INSERT IGNORE INTO $tableName (`" . implode('`,`', $fields) . "`) VALUES ";
    $placeHolr = array_fill(0, count($fields), "?");
    $qPart = array_fill(0, count($rows), "(" . implode(',', $placeHolr) . ")");
    $query .= implode(",", $qPart);

    $pdo = self::getPDOFromEm($em, $container);
    $stmt = $pdo->prepare($query);
    $i = 1;
    foreach ($rows as $row) {
        $row['created_at'] = date("Y-m-d H:i:s");
        foreach ($fields as $f) {
            if (!isset($row[$f])) {
                $row[$f] = null;
            }
            $stmt->bindValue($i++, $row[$f]);
        }
    }

    $result = $stmt->execute();

    if ($result == false) {
        $str = print_r($stmt->errorInfo(), true);
        throw new \Exception($str);
    }

    $stmt->closeCursor();
    $pdo = null;
}

/**
 * Replace old rows in Mysql DB.
 */
public static function replace($em, $container, $tableName, $fields, $rows, $extraFieldValues = null)
{
    if ($extraFieldValues != null) {
        $fields = array_unique(array_merge($fields, array_keys($extraFieldValues)));
    }

    $query = "REPLACE INTO $tableName (`" . implode('`,`', $fields) . "`) VALUES ";
    $placeHolr = array_fill(0, count($fields), "?");
    $qPart = array_fill(0, count($rows), "(" . implode(',', $placeHolr) . ")");
    $query .= implode(",", $qPart);

    $pdo = self::getPDOFromEm($em, $container);
    $stmt = $pdo->prepare($query);
    $i = 1;
    foreach ($rows as $row) {            
        if ($extraFieldValues != null) {
            $row = array_merge($row, $extraFieldValues);
        }
        foreach ($fields as $f) {
            $stmt->bindValue($i++, $row[$f]);
        }                        
    }
    $stmt->execute();
    if (!$stmt) {
        throw new \Exception("PDO::errorInfo():" . print_r($stmt->errorInfo(), true));
    }
    $stmt->closeCursor();
    $pdo = null;
}

How to insert multiple rows in a mysql database at once with prepared statements?

2 Answers2

Linked