I need to query database base on the search criteria coming with the URL. I had this code below, but one thing that I really don't like is the fact that I am not actully benefited from prepare and binding any more. Well, I am looking for something neater.
if (defined($query{"component"}) || defined($query{"env"})) { my $dbh = DBI->connect("DBI:mysql:test", "root", "930612", {'Raise +Error' => 1}); my $query = "SELECT * FROM or_mod"; if (defined($query{"component"})) { if ($query eq "SELECT * FROM or_mod") { $query = $query . " where upper(component) = upper('" . $query{" +component"} . "')"; #I am forced to deal with quotes myself, as I am not binding later } else { $query = $query . " and upper(component) = upper('" . $query{"co +mponent"} . "')"; # I know this is not needed here. I did it just in case some day someo +ne reverse the order of codes } } if (defined($query{"env"})) { if ($query eq "SELECT * FROM or_mod") { $query = $query . " where upper(env) = upper('" . $query{"env"} +. "')"; } else { $query = $query . " and upper(env) = upper('" . $query{"env"} . +"')"; } } $query = $query . " order by env, application, component, mod_date + desc"; print $query; my $sth = $dbh->prepare($query); #This prepare is unreal. One is supposed to prepare a statement only o +nce $sth->execute();
In reply to Looking for neater solution with dynamic query by pg
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |