laravel如何批量更新多條記錄(防SQL注入)

下面由laravel教程欄目給大家介紹關(guān)于laravel批量更新多條記錄,可防止sql注入,希望對(duì)需要的朋友有所幫助!

寫在前面

熟悉laravel的童鞋都知道,laravel有批量一次性插入多條記錄,卻沒有一次性按條件更新多條記錄。

是否羨慕thinkphp的saveAll,是否羨慕ci的update_batch,但如此優(yōu)雅的laravel怎么就沒有類似的批量更新的方法呢?

高手在民間

Google了一下,發(fā)現(xiàn)stackoverflow(https://stackoverflow.com/questions/26133977/laravel-bulk-update)上已經(jīng)有人寫好了,但是并不能防止sql注入。

本篇文章,結(jié)合laravel的Eloquent做了調(diào)整,可有效防止sql注入。

<?php namespace AppModels;  use DB; use IlluminateDatabaseEloquentModel;  /**  * 學(xué)生表模型  */ class Students extends Model {     protected $table = 'students';      //批量更新     public function updateBatch($multipleData = [])     {         try {             if (empty($multipleData)) {                 throw new Exception("數(shù)據(jù)不能為空");             }             $tableName = DB::getTablePrefix() . $this->getTable(); // 表名             $firstRow  = current($multipleData);              $updateColumn = array_keys($firstRow);             // 默認(rèn)以id為條件更新,如果沒有ID則以第一個(gè)字段為條件             $referenceColumn = isset($firstRow['id']) ? 'id' : current($updateColumn);             unset($updateColumn[0]);             // 拼接sql語句             $updateSql = "UPDATE " . $tableName . " SET ";             $sets      = [];             $bindings  = [];             foreach ($updateColumn as $uColumn) {                 $setSql = "`" . $uColumn . "` = CASE ";                 foreach ($multipleData as $data) {                     $setSql .= "WHEN `" . $referenceColumn . "` = ? THEN ? ";                     $bindings[] = $data[$referenceColumn];                     $bindings[] = $data[$uColumn];                 }                 $setSql .= "ELSE `" . $uColumn . "` END ";                 $sets[] = $setSql;             }             $updateSql .= implode(', ', $sets);             $whereIn   = collect($multipleData)->pluck($referenceColumn)->values()->all();             $bindings  = array_merge($bindings, $whereIn);             $whereIn   = rtrim(str_repeat('?,', count($whereIn)), ',');             $updateSql = rtrim($updateSql, ", ") . " WHERE `" . $referenceColumn . "` IN (" . $whereIn . ")";             // 傳入預(yù)處理sql語句和對(duì)應(yīng)綁定數(shù)據(jù)             return DB::update($updateSql, $bindings);         } catch (Exception $e) {             return false;         }     } }

可以根據(jù)自己的需求再做調(diào)整,下面是用法實(shí)例:

// 要批量更新的數(shù)組 $students = [     ['id' => 1, 'name' => '張三', 'email' => 'zhansan@qq.com'],     ['id' => 2, 'name' => '李四', 'email' => 'lisi@qq.com'], ];  // 批量更新 app(Students::class)->updateBatch($students);

生成的SQL語句如下:

UPDATE pre_students SET NAME = CASE WHEN id = 1 THEN     '張三' WHEN id = 2 THEN     '李四' ELSE     NAME END,  email = CASE WHEN id = 1 THEN     'zhansan@qq.com' WHEN id = 2 THEN     'lisi@qq.com' ELSE     email END WHERE     id IN (1, 2)

是不是效率又提高了一大截呢~

相關(guān)推薦:最新的五個(gè)Laravel視頻教程

以上就是

? 版權(quán)聲明
THE END
喜歡就支持一下吧
點(diǎn)贊15 分享