php - 帮助带括号的sql查询

Question

我有以下代码:

SELECT *
FROM table
WHERE thread = $thread
AND (user != $user1 OR user != $user2)

我希望代码选择包含 $thread 但用户不是 $user1 或 $user2 的所有行。

我的代码正确吗？或者应该像这样:

SELECT *
FROM table
WHERE thread = $thread
(AND user != $user1 OR user != $user2)

提前致谢

Answer 1

使用:

SELECT t.*
  FROM TABLE t
 WHERE t.thread = mysql_real_escape_string($thread)
   AND t.user NOT IN (mysql_real_escape_string($user1), mysql_real_escape_string($user2))

请use mysql_real_escape_string , 或风险 SQL injection attacks .