從mysqli轉換爲pdo

Question

我想從數據庫中獲取一個數組，並將結果設置爲一個變量（在本例中，名爲'$ Rate'）。使用mysqli工作的代碼是這樣的：

//Getting Hire Rate 
$Rate = array(); 
$ratequery = "SELECT HireRate FROM movie WHERE MovieID LIKE '$MovieID'"; 
$rate = mysqli_query($con, $ratequery) 
    or die("Error: ".mysqli_error($con)); 
while ($row = mysqli_fetch_array($rate, MYSQLI_ASSOC)) { 
$Rate[] = $row['HireRate']; 
}; 
mysqli_free_result($rate); 

我想用PDO做同樣的事情。我已閱讀過各種網頁，但無法使其正常工作。

Answer 1

這不行？

$sql = "SELECT HireRate FROM movie WHERE MovieID LIKE '$MovieID'"; 
foreach ($conn->query($sql) as $row) { 
    print $row['HireRate']; 
} 

http://php.net/manual/en/pdo.query.php

Answer 2

使用PDO execute方法，而不是query因爲執行阻止你SQL attack

$params = array("%$MovieID%"); 
$stmt = $handle->prepare("SELECT HireRate FROM movie WHERE MovieID LIKE ?"); 
$stmt->execute($params); 
$row = $sql->fetchAll(); 
foreach($data as $row) { 
    $Rate[] = $row['HireRate']; 
}