php sql 字符,php – 以字符串形式打印的SQL字段

我有一个搜索表单来获取一些记录.表单的限制字段之一是record,是一个下拉框,如下所示：

Highest Score

Most runs

然后当他们搜索以下代码时：

if (isset($_GET['action']) and $_GET['action'] == 'search')

{

include $_SERVER['DOCUMENT_ROOT'] . '/stats/includes/db.inc.php';

$placeholders = array();

if($_GET['record'] == '1'){

$placeholders[':record'] = 'runs';

} else if($_GET['record'] == '2'){

$placeholders[':record'] = 'SUM(runs)';

}

$select = 'SELECT playerid, :record as record, user.usertitle';

$from = ' FROM cricket_performance p INNER JOIN user ON p.playerid = user.userid';

$where = ' WHERE TRUE';

if ($_GET['team'] != '')

{

$where .= " AND team = :team";

$placeholders[':team'] = $_GET['team'];

}

if ($_GET['record'] != '')

{

$where .= " ORDER BY :record DESC";

}

$where .= " LIMIT 10";

try

{

$sql = $select . $from . $where;

$s = $pdo->prepare($sql);

$s->execute($placeholders);

}

catch (PDOException $e)

{

$error = 'Error fetching record';

include 'form.html.php';

exit();

}

foreach ($s as $row)

{

$records[] = array('playerid' => $row['playerid'], 'record' => $row['record'], 'usertitle' => $row['usertitle'], '1' => $row['1']);

}

include 'form.html.php';

exit();

}

除了一件事,这完全没问题.这：$placeholders [‘：record’] =’run’;字面意思是在SQL中打印为“运行”,而不是从数据库中选择的运行字段,因此$record [‘record’]将打印为每个条目的“运行”,而不是被选出的数字的表.

如果引号被替换为“”同样的事情发生,如果被替换为“没有任何反应(空结果)