Changes between Version 8 and Version 9 of ImportantCase2

Timestamp:

01/10/25 15:18:53 (10 months ago)

Author:

222039

Comment:

--

ImportantCase2

@@ -8 +8 @@
 
 {{{#!sql 
-SELECT book.bookid, book.CoverImage, book.Title, book.Genre, book.PublishedYear, author.FirstName, author.LastName
-                            FROM Book
-                            INNER JOIN Book_Author ON Book.BookID = Book_Author.BookID
-                            INNER JOIN Author ON Book_Author.AuthorID = Author.AuthorID
-                            WHERE book.genre IN ($placeholders) AND book.PublishedYear BETWEEN $query_from AND $query_to;"
+$genres_filters = $_GET['genres'];
+        $placeholders = str_repeat('?,', count($genres_filters) - 1) . '?';
+
+        $stmt = $conn->prepare("SELECT book.bookid, book.CoverImage, book.Title, book.Genre, book.PublishedYear, author.FirstName, author.LastName
+                                FROM Book
+                                INNER JOIN Book_Author ON Book.BookID = Book_Author.BookID
+                                INNER JOIN Author ON Book_Author.AuthorID = Author.AuthorID
+                                WHERE book.genre IN ($placeholders) AND book.PublishedYear BETWEEN ? AND ?;");
+
+        $stmt->execute(array_merge($genres_filters, [$query_from, $query_to]));
 }}}
 
@@ -46 +51 @@
 }
 
-SELECT book.bookid, book.CoverImage, book.Title, book.Genre, book.PublishedYear, author.FirstName, author.LastName
-                            FROM Book
-                            INNER JOIN Book_Author ON Book.BookID = Book_Author.BookID
-                            INNER JOIN Author ON Book_Author.AuthorID = Author.AuthorID WHERE book.PublishedYear BETWEEN $query_from AND $query_to
+$stmt = $conn->prepare("SELECT book.bookid, book.CoverImage, book.Title, book.Genre, book.PublishedYear, author.FirstName, author.LastName
+                                FROM Book
+                                INNER JOIN Book_Author ON Book.BookID = Book_Author.BookID
+                                INNER JOIN Author ON Book_Author.AuthorID = Author.AuthorID WHERE book.PublishedYear BETWEEN :year_from AND :year_to;
+        ");
+        $stmt->bindParam(":year_from", $query_from, PDO::PARAM_STR);
+        $stmt->bindParam(":year_to", $query_to, PDO::PARAM_STR);
+        $stmt->execute();
 }}}