Question

I want to make an category-system CMS. Everything is fine, except a big trouble.

How can I can handle and generate the mysql query depends by some inputs like:

site.com/some-category&sortby=views&from=smt&anotherInput=key

For example, for this input my query should be something like

SELECT * FROM `articles` WHERE from='smt' AND afield='key' ORDER BY VIEWS

But these inputs will be different. How I can write this code? I don’t know much things about designs patterns, but, I’ve heard about Factory pattern, is this a part of my solution?

Than

Answer 1

Factory pattern can help you with e.g. connecting/quering various databases without need to rewrite the entire code. This has nothing to do about query itself.

You can look at PDO extension, I usually use it together with prepared statements.
It will let you write queries like this:

$prepare = $db->prepare('
    SELECT 
      *
    FROM
      articles
    WHERE
      from=:from AND afield=:afield
    ORDER BY
      views
');

$prepare->bindValue(':from', $_GET['from'], PDO::PARAM_STR);
$prepare->bindValue(':afield', $_GET['afield'], PDO::PARAM_STR);

$prepare->execute();

return $prepare;

The good thing about it is that you don’t need to protect this from sql injections as PDO makes it for you. Also, the query is cached and you can run it several times with different params.