Laravel 的原始 SQL 函数之间的区别
似乎我不是唯一一个为 Laravel 的 DB::raw()、DB::select()、DB::statement() 和 DB::unprepared() 方法之间的差异而苦苦挣扎的人.似乎几乎需要尝试使用所有 4 个给定的 SQL 语句来确定哪个会起作用.谁能澄清它们之间的关系，以及用于什么目的?
It seems I'm not the only person struggling with the differences between Laravel's DB::raw(), DB::select(), DB::statement(), and DB::unprepared() methods. It seems as if one almost needs to try a given SQL statement with all 4 to identify which will work. Can anybody clarify how they relate to each other, and which to use for what purposes?
推荐答案
我会尽量澄清:
它会生成一个原始且经过清理的 SQL 字符串，以传递给其他查询/语句，从而防止 SQL 注入.是与所有的一起使用的，从不单独使用.并且您永远不应该向您的查询/语句发送未经处理的字符串.
It generates a raw and sanitized SQL string, to be passed to other query/statements, preventing SQL injections. Is to be used with all of the and never alone. And you should never send a not sanitized string to your query/statements.
DB::select(DB::raw('select * from whatever'));
DB::select()
用于简单选择:
DB::select(DB::raw('select * from whatever'));
DB::statement()
我认为它适用于选择，但应该用于非 SQL 查询命令:
DB::statement()
I think it work with selects, but should be used for non SQL query commands:
DB::statement(DB::raw('update whatever set valid = true;'));
DB::unprepared()
Laravel 中的所有 SQL 命令默认都是准备好的，但有时你需要在未准备模式下执行命令，因为某些数据库中的某些命令无法在准备模式下运行.这是我打开的一个问题:https://github.com/laravel/framework/issues/53
DB::unprepared(DB::raw('update whatever set valid = true;'));
相关文章