| [reply] |
Nvm...found it.
for future ref.
my $id = $dbh->selectrow_arrayref("SELECT id FROM users where username
+ = '$username'");
| [reply]
[d/l] |
Although your version works, it is potentially open to an SQL injection attack through the $username variable. With DBI that is easy to avoid by using placeholders. Also, I think you want selectrow_array (selectrow_arrayref returns a reference to an array, wheras selectrow_array will return a list, or just a scalar value if you are selecting a single column).
my $id = $dbh->selectrow_array("SELECT id FROM users where username =
+?", {}, $username);
| [reply]
[d/l] |
I think you need array context there:
my ($id) = $dbh->selectrow_array("SELECT id FROM users where username
+= ?", {}, $username);
| [reply]
[d/l] |
Should I even bother using a prepare cache statement for the query?
That depends on whether or not you're executing the statement multiple times. In MySQL, you get less benefit in pre-preparing your statements than in some other databases, but the answer is that you can prepare it once if you want to since selectrow_array() (which there are other examples of in this thread) accepts either a SQL statement or a previously prepared statement handle as it's first argument.
Also, depending on how often you're executing the lookup in your program, and how large the table is, you may want to just read the whole table into a hash array.
| [reply] |
