Inserting Raw SQL about latitude HOT 7 CLOSED

It feels like this is still just as much a general php question as it is a Latitude question, I'll keep hunting for an answer myself but if anyone can put me out of my misery it'd be greatly appreciated.

from latitude.

Yay, got it...

Code fragment removed by @shadowhand because it is was vulnerable to SQL Injection.

Criteria is the key, make it in raw sql, then use criteria to interpret that into the Latitude format

Thanks again @shadowhand for a great package!

from latitude.

This seems like a situation where IN would be appropriate:

$query->andWhere(field('pd.destination_id')->in($destinations));

from latitude.

@riseoflex88 definitely do not use the code you posted, see my edit above.

from latitude.

The code you suggested is where I started but didn't work for me, I think I must have overlooked the error's I was experiencing so tried a different route.

$query->andWhere(field('pd.destination_id')->in($destinations));

I'm not sure this is building the correct output when providing an array. If I provide an array as above, I get an "Array to string conversion" error and the SQL produced looks like:

WHERE pd.destination_id IN (Array)

However, if I convert to a string...

$query->andWhere(field('pd.destination_id')->in(implode(', ', $destinations)));

SQL Output:

WHERE pd.destination_id IN ("a, b, c")

It'll (obviously) wrap the string in quotes so the query will look for a destination id of "a, b, c"

I've tried looking through the latitude code for a suggestion on what needs to change, but I can't find one,

from latitude.

Ah, my mistake. I forgot to unpack:

$query->andWhere(field('pd.destination_id')->in(/* unpack change */ ...$destinations));

Let me know if that works.

from latitude.

Ah, perfect. Sorry that's me not understanding the use of ... to even make a guess at adding that in there

from latitude.