php输出字符串单引号,如何使用php在字符串中转义单引号(撇号)

答案是你不需要.使用PDO准备的正确方法是这样的：

$stmt = $pdo->prepare(

"SELECT * FROM `products_keywords` WHERE `product_type` = ?");

这是使用预备声明的重点.然后你bind的参数如下：

$stmt->bindParam(1, $product_type)

证明,

架构：

create table `products_keywords`

( `id` int not null,

`products_keywords` varchar(1000) not null,

`product_type` varchar(100) not null

);

insert `products_keywords` (`id`,`products_keywords`,`product_type`) values

(1,'zoom lawn cut mower',"Lawn Mower"),

(2,'stylish torso Polo','Men\'s Shirt');

查看数据：

select * from `products_keywords`;

+----+---------------------+--------------+

| id | products_keywords | product_type |

+----+---------------------+--------------+

| 1 | zoom lawn cut mower | Lawn Mower |

| 2 | stylish torso Polo | Men's Shirt |

+----+---------------------+--------------+

PHP：

// turn on error reporting, or wonder why nothing is happening at times

error_reporting(E_ALL);

ini_set("display_errors", 1);

$servername="localhost";

$dbname="so_gibberish";

$username="nate123";

$password="openSesame1";

try {

$pdo = new PDO("mysql:host=$servername;dbname=$dbname", $username, $password);

$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

$pdo->setAttribute(PDO::ATTR_EMULATE_PREPARES, false);

$product_type="Men's Shirt";

$stmt = $pdo->prepare("SELECT * FROM `products_keywords` WHERE `product_type` = ?");

$stmt->bindParam(1, $product_type);

$stmt->execute();

while($row = $stmt->fetch()) {

echo $row['id'].", ".$row['products_keywords'].", ".$row['product_type']."
";

}

} catch (PDOException $e) {

echo 'pdo problemo: ' . $e->getMessage(); // dev not production code

exit();

}

?>

浏览器：