如何正確查詢MySQL數據庫

Question

我正在做一個像下面的MySql查詢，它的工作原理，但我不得不添加很多'@'我想知道如何正確地做到這一點？

$query="SELECT * FROM `facebook` ORDER by rand() LIMIT 1"; 
$result=mysql_query(@$query) or die(mysql_error()); 
$topic = htmlentities(mysql_result(@$result,@$i,"topic")); 
$name = htmlentities(mysql_result(@$result,@$i,"name")); 
$file = htmlentities(mysql_result(@$result,@$i,"file")); 
$description = htmlentities(mysql_result(@$result,@$i,"description")); 

以下是我拼湊起來的輸出：

$params = array(
    "message" => ("". $topic .""), 
    "link" => "http://www.example.com", 
    "picture" => ("http://www.example.com/facebook/file-uploading/uploads/". $file .""), 
    "name" => ("". $name .""), 
    "caption" => "WWW.EXAMPLE.COM", 
    "description" => ("". $description ."") 
); 

謝謝

Answer 1

我假設你正在使用PHP。我經常使用PDO，這是我通常做的。

//PDO Connection 
$connection = new PDO("MYSQL:host=localhost; dbname=mydb","userName","password"); 

//Query 
$stmt = $connection->prepare("SELECT * FROM myTable WHERE id = ?"); 
//Execute query passing in parameter for id 
$stmt->execute(array(5)); 
//Get Result 
$result = $stmt->fetchAll(PDO::FETCH_ASSOC); 

我曾經使用MSQII，但最近很喜歡與PDO合作。