原文地址:MySQL預處理語句prepare、execute、deallocate的使用mysql
PREPARE stmt_name FROM preparable_stmt EXECUTE stmt_name [USING @var_name [, @var_name] ...] - {DEALLOCATE | DROP} PREPARE stmt_name
示例sql
mysql> PREPARE pr1 FROM 'SELECT ?+?'; Query OK, 0 rows affected (0.01 sec) Statement prepared mysql> SET @a=1, @b=10 ; Query OK, 0 rows affected (0.00 sec) mysql> EXECUTE pr1 USING @a, @b; +------+ | ?+? | +------+ | 11 | +------+ 1 row in set (0.00 sec) mysql> EXECUTE pr1 USING 1, 2; -- 只能使用用戶變量傳遞。 ERROR 1064 (42000): You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '1, 2' at line 1 mysql> DEALLOCATE PREPARE pr1; Query OK, 0 rows affected (0.00 sec)
使用PAREPARE STATEMENT能夠減小每次執行SQL的語法分析,
好比用於執行帶有WHERE條件的SELECT和DELETE,或者UPDATE,或者INSERT,只須要每次修改變量值便可。
一樣能夠防止SQL注入,參數值能夠包含轉義符和定界符。數據庫
適用在應用程序中,或者SQL腳本中都可。session
一樣PREPARE ... FROM能夠直接接用戶變量:spa
mysql> CREATE TABLE a (a int); Query OK, 0 rows affected (0.26 sec) mysql> INSERT INTO a SELECT 1; Query OK, 1 row affected (0.04 sec) Records: 1 Duplicates: 0 Warnings: 0 mysql> INSERT INTO a SELECT 2; Query OK, 1 row affected (0.04 sec) Records: 1 Duplicates: 0 Warnings: 0 mysql> INSERT INTO a SELECT 3; Query OK, 1 row affected (0.04 sec) Records: 1 Duplicates: 0 Warnings: 0 mysql> SET @select_test = CONCAT('SELECT * FROM ', @table_name); Query OK, 0 rows affected (0.00 sec) mysql> SET @table_name = 'a'; Query OK, 0 rows affected (0.00 sec) mysql> PREPARE pr2 FROM @select_test; Query OK, 0 rows affected (0.00 sec) Statement prepared mysql> EXECUTE pr2 ; +------+ | a | +------+ | 1 | | 2 | | 3 | +------+ 3 rows in set (0.00 sec) mysql> DROP PREPARE pr2; -- 此處DROP能夠替代DEALLOCATE Query OK, 0 rows affected (0.00 sec)
每一次執行完EXECUTE時,養成好習慣,須執行DEALLOCATE PREPARE … 語句,這樣能夠釋放執行中使用的全部數據庫資源(如遊標)。
不只如此,若是一個session的預處理語句過多,可能會達到max_prepared_stmt_count的上限值。.net
預處理語句只能在建立者的會話中可使用,其餘會話是沒法使用的。
並且在任意方式(正常或非正常)退出會話時,以前定義好的預處理語句將不復存在。
若是在存儲過程當中使用,若是不在過程當中DEALLOCATE掉,在存儲過程結束以後,該預處理語句仍然會有效。code