如何内爆sql in 子句的值数组?

cod*_*dec 1 php mysql

我有一堆水果。我试图在“水果”列中获取包含这三种水果中的任何一种的所有行

$fruits = array('apple','banana','orange');

$imploded_fruits = implode(',',$fruits); 

$sql = "SELECT * FROM market WHERE fruits IN ('$imploded_fruits');";
Run Code Online (Sandbox Code Playgroud)

这不是返回预期值。格式正确吗?

Nik*_*aut 5

implode("','",$fruits)

$fruits = array('apple','banana','orange');
$imploded_fruits = implode("','",$fruits); 
$sql = "SELECT * FROM market WHERE fruits IN ('$imploded_fruits');";
Run Code Online (Sandbox Code Playgroud)

您的查询看起来像

https://eval.in/1004169

SELECT * FROM market WHERE fruits IN ('apple','banana','orange');
Run Code Online (Sandbox Code Playgroud)