PHPのお勉強！

PHP TOP
PHP 8.4.2 Released!

    Pdo\Pgsql::escapeIdentifier

    (PHP 8 >= 8.4.0)

    Pdo\Pgsql::escapeIdentifier — Escapes a string for use as an SQL identifier

    説明

    public Pdo\Pgsql::escapeIdentifier(string $input): string

    Escapes a string for use as an SQL identifier, such as a table, column, or function name. This is useful when a user-supplied identifier might contain special characters that would otherwise not be interpreted as part of the identifier by the SQL parser, or when the identifier might contain upper case characters whose case should be preserved.

    パラメータ

    input
    A string containing text to be escaped.

    戻り値

    A string containing the escaped data.

    例

    例1 Pdo\Pgsql::escapeIdentifier() example

    <?php
    $pdo     = new Pdo\Pgsql('pgsql:dbname=test host=localhost', $user, $pass);

    $unescapedTableName = 'UnescapedTableName';
    $pdo->exec("CREATE TABLE $unescapedTableName ()");

    $escapedTableName = $pdo->escapeIdentifier('EscapedTableName');
    $pdo->exec("CREATE TABLE $escapedTableName ()");

    $statement = $pdo->query(
    "SELECT relname FROM pg_stat_user_tables WHERE relname ilike '%tablename'"
    );

    var_export($statement->fetchAll(PDO::FETCH_COLUMN, 0));

    $tableNameWithSymbols = 'Table-Name-With-Symbols';
    $pdo->exec("CREATE TABLE $tableNameWithSymbols ()");
    ?>

    上の例の出力は、 たとえば以下のようになります。

    array (
  0 => 'unescapedtablename',
  1 => 'EscapedTableName',
)
Fatal error: Uncaught PDOException: SQLSTATE[42601]: Syntax error: 7 ERROR:  syntax error at or near "Table"
LINE 1: CREATE TABLE Table-Name-With-Symbols ()

    参考

    • PDO::quote() - クエリ用の文字列をクオートする

    Found A Problem?

    Learn How To Improve This Page • Submit a Pull Request • Report a Bug
    ＋add a note

    User Contributed Notes

    There are no user contributed notes for this page.
    To Top