php - foreach中使用mysql请求时，先select好，后不select

Question

使用这段代码:

foreach ($content as $value) {
    $data=$value[0];
    echo $data; 
    $req="SELECT * FROM TABLE WHERE data='$data'";
    $result=mysql_query($req) or die ('Erreur :'.mysql_error());
    if (mysql_num_rows($result)){
        echo '  ENTRY EXISTS';
    }
    else {
        echo '  ENTRY DOES NOT EXIST';
    }   
}

对于第一个 $value，它找到了一个条目，这是正确的。对于下一个它没有，但它应该。如何解决？

---

更新代码

使用这段代码:

        $found_list = array();

        $fetch_list = array();
        foreach($content as $value){
            $fetch_list[] = "'" . mysql_real_escape_string($value[0]) . "'";
        }

        if( empty($fetch_list) ){
            echo '<p>No data to fetch</p>';
        }else{

            $sql = 'SELECT DISTINCT inst_name
                FROM INSTITUTS
                WHERE inst_name IN (' . implode(', ', $fetch_list) . ')';
            $res = mysql_query($sql)
                or die ('Error: ' . mysql_error());
            while( $row = mysql_fetch_assoc($res) ){
                $found_list[] = $row['inst_name'];
            }
            var_dump($found_list);
        }

        foreach($content as $value){
            echo '<br/>';
            echo $value[0] . ' ';
            if( in_array($value[0], $found_list) ){
                echo "ENTRY EXISTS\n <br/>";
            }else{
                echo "ENTRY DOES NOT EXIST\n <br/>";
            }
        }

结果是:

 array(3) { [0]=> string(13) "AixEnProvence" [1]=> string(19) "AixEnProvenceAnnexe" [2]=> string(7) "Acheres" } 
acheres ENTRY DOES NOT EXIST 
AixEnProvence ENTRY EXISTS 
aixenprovenceannexe ENTRY DOES NOT EXIST 
instituttest ENTRY DOES NOT EXIST

Answer 1

没有理由用几乎相同的查询来淹没 MySQL 服务器。看看 IN expression :

SELECT foo, bar
FROM table
WHERE data IN ('a', 'b', 'c');

我还建议您使用 google 搜索 SQL 注入(inject)和 XSS 攻击。

编辑:这里有一些代码可以解决最新评论中描述的问题:

<?php

// $content = ...
$found_list = array();

$fetch_list = array();
foreach($content as $value){
    $fetch_list[] = "'" . mysql_real_escape_string($value[0]) . "'";
}

if( empty($fetch_list) ){
    echo '<p>No data to fetch</p>';
}else{
    $sql = 'SELECT DISTINCT data
        FROM table
        WHERE data IN (' . implode(', ', $fetch_list) . ')';
    $res = mysql_query($sql)
        or die ('Error: ' . mysql_error());
    while( $row = mysql_fetch_assoc($res) ){
        $found_list[] = $row['data'];
    }
}

foreach($content as $value){
    echo $value[0] . ' ';
    if( in_array($value[0], $found_list) ){
        echo "ENTRY EXISTS\n";
    }else{
        echo "ENTRY DOES NOT EXIST\n";
    }
}

?>

更新问题的答案:

PHP comparison operators区分大小写:

<?php
var_dump('Acheres'=='acheres'); // bool(false)
?>

您可以使用 strtolower()在比较之前对值进行归一化。