传递值数组从形式到SQL查询WHERE IN子句

Question

我有一个具有大量的复选框，这是从唯一值在MySQL表中生成的一种形式：

<form method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>"> 
<?php 
    $query5="SELECT distinct from_user from tracks WHERE uploaded_page='$this_path_short' ORDER BY from_user"; 
    $result5=mysql_query($query5) or die(mysql_error()); 
    while ($row = mysql_fetch_array($result5)) { 
     $from_user = $row['from_user']; 
     echo "<input type=\"checkbox\" name=\"from_user[]\" value=\"AND ".$from_user."\" checked=\"checked\">".$from_user."<br>"; 
    } 
?> 
<input type="submit" name="submit" value="filter"><br> 

我将随后要通过'from_user'值的数组到另一个MySQL页面上的查询。我能得到的值是这样的：

$names=implode(" ", $_POST['from_user']); 

但我不知道如何将这个数组在下面的MySQL查询：

$query1="SELECT * FROM tracks WHERE from_user IN **array goes here**)"; 

Answer 1

$query1='SELECT * FROM tracks WHERE from_user IN ('.implode(',',$_POST['from_user']).')'; 

Answer 2

取出AND所以该复选框值的样子此：

echo "<input type=\"checkbox\" name=\"from_user[]\" value=\"".$from_user."\" checked=\"checked\">".$from_user."<br>"; 
    } 

IN预计逗号分隔值：

$names=implode(",", $_POST['from_user']);  
$query1="SELECT * FROM tracks WHERE from_user IN (".$names."))"; 

!!!!但是：请，请，请用准备好的语句，因为你的代码是SQL注入敞开：的 http://php.net/manual/de/mysqli.prepare.php

$mysqli = new mysqli("localhost", "my_user", "my_password", "world"); 

/* check connection */ 
if (mysqli_connect_errno()) { 
    printf("Connect failed: %s\n", mysqli_connect_error()); 
    exit(); 
} 

$result = null; 
$names = implode(",", $_POST['from_user']); 

/* create a prepared statement */ 
if ($stmt = $mysqli->prepare("SELECT * FROM tracks WHERE from_user IN (?)")) { 

    /* bind parameters for markers */ 
    $stmt->bind_param("s", $names); 

    /* execute query */ 
    $stmt->execute(); 

    /* bind result variables */ 
    $stmt->bind_result($result); 

    /* fetch value */ 
    $stmt->fetch(); 

    print_r($result); 

    /* close statement */ 
    $stmt->close(); 
} 

/* close connection */ 
$mysqli->close();