Escaping object properties in sql?

Question

PHP

How to escape such variables $this->data['user_name'] in sql query? The date property is an array.
Tried $this->data['user_name'] and {$this->data['user_name']} and it still doesn't work.

Answer 1

Look in the direction of php.net/manual/ru/pdostatement.execute.php, or if everything is really bad php.net/manual/ru/function.mysql-real-escape-string.php

Answer 2

you need to learn php syntax first

Answer 3

If it’s an array, then it won’t work directly, you need to construct an expression for IN, I once wrote a bug for PDO for this case (and for inserting several lines) pastebin.com/Lisnq0vE

Answer 4

because j++ is to first take the value (0), use it (write it to j), and then only increase
if you do

for (int i = 0; i < 10; i++) 
    j = ++j;
    // или j = j+1;
    // или j++

, get 10

Answer 5

In the chewed version, everything is clear, except for the last part, why j = z ?

Then, that is how the postfix increment operator is defined. Copy the value of the variable. Increment variable. Return the copied value. By this copying, the postfix increment (sh++) differs from the prefix increment (++sh).
The assignment is done at the very end, because it has a lower priority.