Symfony查询出错:应为Literal,得到'"';


Error with a Symfony query : Expected Literal, got '"'

我有以下查询:

$query = $em->createQueryBuilder()
            ->select('u.id, u.username, u.username_canonical, u.email, u.email_canonical, u.last_login, u.name, u.type, u.phone, u.site, u.agency, u.subtype, u.info, u.created_date, u.vip')
            ->from('ContrateAdminBundle:Fosuser', 'u')
            ->where('u.created_date BETWEEN "'.$fromdateaccounts.'" AND "'.$todateaccounts.'" ')                      
            ->getQuery();
$results = $query->getResult();

在Symfony中获取用户数据,但我得到了以下错误:

[Syntax Error] line 0, col 223: Error: Expected Literal, got '"'
500 Internal Server Error - QueryException
1 linked Exception: QueryException »

我的查询输出是:

SELECT u.id, u.username, u.username_canonical, u.email, u.email_canonical, u.last_login, u.name, u.type, u.phone, u.site, u.agency, u.subtype, u.info, u.created_date, u.vip
FROM ContrateAdminBundle:Fosuser u
WHERE u.created_date BETWEEN "2014-08-04 13:29" AND "2014-10-30 13:29" 

SQL中的字符串文字由单引号'表示,而不是由双引号"表示,因此您必须用':替换查询中作为字符串分隔符的"

$query = $em->createQueryBuilder()
            ->select('u.id, u.username, u.username_canonical, u.email, u.email_canonical, u.last_login, u.name, u.type, u.phone, u.site, u.agency, u.subtype, u.info, u.created_date,u.vip')
            ->from('ContrateAdminBundle:Fosuser', 'u')
            ->where('u.created_date BETWEEN ''${fromdateaccounts}'' AND ''{$todateaccounts}''')                      
            ->getQuery();

请使用参数。接受的答案可能会生成SQL注入。

    ->where('u.something = ?1')
    ->setParameter(1, '')

您也可以使用Expr:

$queryBuilder = $em->createQueryBuilder();
...
->where($queryBuilder->expr()->between('u.created_date', $fromdateaccounts, $todateaccounts));
相关文章: