PHP implode quoted string

Question

$brand_condition = ' AND ' . mysql_real_escape_string($brand_selection) . ' IN ';

$brand_condition .= $quote10 . '"'. mysql_real_escape_string($brand_value) . '"' .$quote9;

$brand_conditions[] = $brand_condition;

$query .= implode(' AND ', $brand_conditions) . '';

This produces: AND manufacturer IN ("brand1,brand2")

Since I'm using the IN statement, I need the values to be quoted. At the same time, I am escaping potential quotes with mysql_real_escape_string.

Does anyone see a simple way to get around this small problem?

Karoly Horvath · Accepted Answer · 2011-07-26 15:34:20Z

3

function quote_escape(&$str) {
    $str = '"' . mysql_real_escape_string(chop($str)) . '"';
}

$brands = explode(',', $brand_value);
array_walk($brands, "quote_escape");
$brands = implode(',', $brands);

or

function quote_escape($str) {
     return '"' . mysql_real_escape_string(chop($str)) . '"';
}
$brands = implode(',', array_map("quote_escape", explode(',', $brand_value)));

edited Jul 26, 2011 at 15:34

answered Jul 26, 2011 at 15:24

Karoly Horvath

96.8k11 gold badges123 silver badges181 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

just somebody Over a year ago

change it from array_walk to array_map, remove the repeated assignments, and you have my upvote.

Karoly Horvath Over a year ago

I'm not sure that's a readable solution for the OP, but as you wish :P

Ryan Over a year ago

Where exactly is the AND statement supposed to be placed?

Ryan Over a year ago

$query .= ('AND manufacturer IN'. '('. $brands).')'; --Nevermind

user670135 · Accepted Answer · 2011-07-26 15:24:25Z

2

How about $brand_conditions[] = '"'.$brand_condition.'"'; so your adding quotes right before you add the brand_condition in your array.

answered Jul 26, 2011 at 15:24

user670135

Comments

Nemoden · Accepted Answer · 2011-07-26 15:22:48Z

1

$concurrent_names = array("O'reilly", 'Tupac "MC New York" Shakur', 'Nemoden');
$escaped_concurrent_names = array_map('mysql_real_escape_string', $concurrent_names);
$condition = 'WHERE name in ("'.implode('", "', $escaped_concurrent_names).'")';

answered Jul 26, 2011 at 15:22

Nemoden

9,1066 gold badges45 silver badges66 bronze badges

Comments

Vinit Kadkol · Accepted Answer · 2014-03-18 10:13:21Z

0

Use this to add quotes for imploded string.

$values = implode( " ',' ", array_values($values) );

answered Mar 18, 2014 at 10:13

Vinit Kadkol

1,30313 silver badges14 bronze badges

Comments

pawan.sis · Accepted Answer · 2017-03-09 09:03:19Z

-1

$brands=array(nokia,samsung,xiomi);

$brands=implode(" ',' ",$brand);

//$brands='nokia','samsung','xiomi';

WHERE column_name IN ($brands)

answered Mar 9, 2017 at 9:03

pawan.sis

293 bronze badges

Collectives™ on Stack Overflow

PHP implode quoted string

5 Answers 5

4 Comments

Comments

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

5 Answers 5

4 Comments

Comments

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related