"SELECT*FROM users WHERE id IN()"== FAIL

这个问答内容是关于 SQL 查询语句的一个错误示例。在这个查询中，IN() 函数没有包含任何值，导致查询失败。

正确的语法应该是：

SELECT * FROM users WHERE id IN (value1, value2, value3, ...)

其中，value1, value2, value3, ... 是一组用逗号分隔的值，表示要查询的 id 值。

例如，如果要查询 id 为 1 或 2 的用户，可以使用以下查询语句：

SELECT * FROM users WHERE id IN (1, 2)

如果要查询 id 在一个范围内的用户，可以使用以下查询语句：

SELECT * FROM users WHERE id BETWEEN 1 AND 10

这个查询将返回 id 在 1 到 10 之间的所有用户。

相关·内容

delete from t1 where id = 10

delete from t1 where id = 10; 组合一：id列是主键，RC隔离级别 id = 10的记录加上X锁....组合二：id列是二级唯一索引，RC隔离级别若id列是unique列，其上有unique索引。...那么SQL需要加两个X锁，一个对应于id unique索引上的id = 10的记录，另一把锁对应于聚簇索引上的[name=’*’,id=10]的记录。...组合三：id列是二级非唯一索引，RC隔离级别 id列索引上，满足id = 10查询条件的记录，均已加锁。同时，这些记录对应的主键索引上的记录也都加上了锁。...组合五：id列是主键，RR隔离级别与组合一相同组合六：id列是二级唯一索引，RR隔离级别与组合五类似，组合六的加锁，与组合二：[id唯一索引，Read Committed]一致。

4061 0

数据库的查询语句_数据库select from where

SELECT id,NAME ,AGE,address FROM Student3 WHERE english IS NOT NULL; 5....from 表名 where 字段名称 like '__'; */ -- 查看姓马的学生 SELECT id,age, address FROM student3 WHERE NAME...LIKE '%马%'; -- 查看包含两个字符的学生 SELECT NAME,id,age, address FROM student3 WHERE NAME LIKE '__'; -- 查询姓名中第二字是化的所有信息...SELECT * FROM Student3 WHERE NAME LIKE '%_化%'; -- 查询学生姓名是三个字符的 SELECT * FROM student3 WHERE NAME LIKE...student3 ORDER BY math ASC; -- 将id=5 英语成绩为70 UPDATE student3 SET english =70 WHERE id=5; -- 将id=6

1.4K1 0

MyBatis源码 | 一条查询单条结果（`select * from t_user where id = ?`）SQL的执行方法链追踪流程

环境：mybatis版本3.4.5 mysql数据库驱动版本：5.1.6 MyBatis源码：一条查询单条结果（select * from t_user where id = ?）

4971 0

前端也该知道，除了 select 、 from 、 where 之外的另外几个重要的数据库操作

由于自己的数据库知识还停留在大学时期，对仅存的 select 、 from 、 where 这几个关键字的印象，稍微复杂一点的操作就又要一直检索查。。。...现在生成数据的成本太低，分析数据、提取有效数据的成本太高 ---- select 、 from 、 where 这几个不说了。。。...： SELECT customers.name, orders.order_date FROM customers JOIN orders ON customers.customer_id = orders.customer_id...ON customers.customer_id = orders.customer_id WHERE customers.name = '张三' OR orders.order_date > '2020...例如查找客户名称以“张”开头的记录： SELECT customers.name, orders.order_date FROM customers JOIN orders ON customers.customer_id

5822 0

Hive性能优化统计每日IP CREATE TABLE ip_2014_12_29 AS SELECT COUNT(DISTINCT ip) AS IP FROM logdfs WHERE logda

SELECT * FROM T1 JOIN (SELECT * FROM T2) subq ON (T1.a1=subq.a2) WHERE subq.prtn=100; 查询语句若将“subq.prtn...复制代码 INSERT OVERWRITE TABLE t1 SELECT user_id,substr(MAX(CONCAT(ds,cat),9) AS main_cat) FROM users...user_id,sum(qty) AS qty,SUM(amt) AS amt FROM users WHERE ds BETWEEN 20120301 AND 20120329 GROUP BY user_id...解决方法 1：user_id 为空的不参与关联，子查询过滤 null SELECT * FROM log a JOIN bmw_users b ON a.user_id IS NOT NULL AND...a.user_id=b.user_id UNION All SELECT * FROM log a WHERE a.user_id IS NULL 解决方法 2 如下所示：函数过滤 null SELECT

1.7K5 0

如何从根本上防止SQL注入

以PHP语句为例，命令如下: $query = "SELECT * FROM users WHERE id = $_GET['id']"; 由于这里的参数ID可控，且被带入数据库查询，所以非法用户可以任意拼接...当传入的参数ID为1时，数据库执行的代码如下: select * from users where id = 1' 这不符合数据库语法规范，所以会报错。...当传入的参数ID为and1=1时，执行的SQL语句如下: select * from users where id = 1 and 1=1 因为1=1为真，且where语句中id=1也为真，所以页面会返回与...php $pdo=new PDO('mysql:host=127.0.0.1;dbname=test','root','root'); $stmt=$pdo->prepare('select * from...user where id=:id'); $stmt->bindParam(':id',$_GET['id'])； $stmt->execute(); $result=$stmt->fetchAll(

4823 0

select * from t_student where class between 200 and 300需要执行几次索引树的搜索操作，会扫描多少行

('小明', '100'),('小詹', '200'),('小龙', '300'),('小红', '400'),('小哈', '500'),('小屁孩', '600'); 执行查询的SQL语句如下： select...* from t_student where class between 200 and 300; 我们一起来看看这条 SQL 查询语句的执行流程：在 class_idx 索引树上找到 class=...200 的记录，取得 ID = 2；再回到 ID 索引树查到 ID=2 对应的行的结果数据R2；在 class_idx 索引树取下一个值 class=300，取得 ID=3；再回到 ID 索引树查到...ID=3 对应的行结果数据R3；在 class_idx 索引树取下一个值 class=400，不满足条件，循环结束。...覆盖索引如果执行的语句是 select id from t_student where class between 200 and 300，这时只需要查 ID 的值，而 ID 的值已经在 class_idx

2652 0

xorm使用小结

删 res, err := engine.Exec("delete from t_user where f_id=?", s.FId) if err !...查按sql // 执行完后，ret被神奇的赋值了 var ret []*User err:=engine.SQL("select * from t_user where f_name=?...;", userName).Find(&ret) // 按where users := make([]User, 0) err := engine.Where("f_id > ?..., 30, "pig").Limit(10, 10).Find(&users) // 用查询条件结构（各属性and关系) user := &User{Name:"xlw"} // 查询单个 select...= nil { return errors.New("fail to session begin") } if _, err := sess.Id(id1).Update(account_1)

2.5K1 0

PDO实现学生管理系统

执行数据库，并解析遍历 $sql = "SELECT * FROM users"; foreach($pdo- query($sql) as $val){ echo "<...拼装sql语句，取出信息 $sql = "SELECT * FROM users WHERE id="....= $_GET['id']; $sql = "DELETE FROM users WHERE id={$id}"; $pdo- exec($sql); header("location:index.php...= $_POST['id']; $sql = "UPDATE users SET name='{$name}',sex='{$sex}',age={$age},class={$class}...WHERE id={$id}"; $rw = $pdo- exec($sql); if($rw 0){ echo "<script alert('修改成功'); window.location

3441 0

python数据库编程。

) select_sqli = 'select * from myuser;' res= cur.execute(select_sqli) print("查看语句的返回结果:"...('cooffee') try: delete_sqli = 'delete from myuser where name="user3";' cur.execute(delete_sqli...select_sqli = 'select * from myuser;' res = cur.execute(select_sqli) print("查看语句的返回结果:", res)...""" select_sqli = 'select * from bankData where id=%s' %(accid) print("execute sql:",...= 'select money from bankData where id=%s' %(accid) print('execute sql:', select_sqli)

6382 0

JDBC 通过PreparedStatement 解决SQL注入（5）

id=1，这是请求方式为get的接口，发送这个请求相当于调用一个查询语句 $sql = "select * from article where id = ",$id 正常情况下，应该返回id=1的文章信息...假如此时输入用户名和密码为user和123456，提交，相当于调用了以下的SQL语句： select * from user where username = 'user' and password =...此时SQL语句是： select * from user where username = 'user'#' and assword = '111' #后面被注释了，实际执行的sql是： select...* from user where username = 'user' 2）用户名输入：user'--，密码随意输入，如：111 select * from user where username =...* from users where username = ?"

1.8K1 0

MySQL数据库编程基础入门3

; INSERT INTO employee SELECT * FROM users; -- 3.数据查看 SELECT * FROM users; -- id username birthday...SELECT COUNT(id) FROM exam WHERE math >= 80; -- 21、统计总分大于200的人数有多少？...FROM City,Country WHERE ID < 10 AND City.CountryCode = Country.Code -- SQL标准写法 SELECT ID,City.NAME...WHERE Nginx='Fail'); -- 外部查询返回的结果匹配的子查询的结果 SELECT * FROM person WHERE name IN (SELECT name FROM blacklist...显式 SELECT * FROM grade LEFT JOIN student ON grade.id = student.grade_id WHERE grade.id=3; --可以理解成从查询的结果中删除

1.6K1 0

Mysql Innodb 锁机制 select * from table where?insert?delete?update?3个insert的死锁2个update的死锁3个以上delete的死

* from table where?...语句转换为了select … lock in share mode insert?...next-key锁因为NULL不等于NULL，NULL和任何值比较均返回NULL，包括NULL本身，但是 NULL is NULL 死锁案例分析 create table `deadlocktest` ( `id...unsigned NOT NULL, `d` bigint(20) unsigned NOT NULL, `e` bigint(20) unsigned NOT NULL, PRIMARY KEY(`id...deadlocktest where a=550 delete from deadlocktest where a=550 delete from deadlocktest where a

1.6K8 0

掌握Mybatis动态映射，我可是下了功夫的

select * from m_user <if test="id !...if+trim+foreach实现多条件查询对前面的代码进行调整 select * from...在项目中我见过很多人这么干，就是当where语句后面不太确定能有条件出现时，使用 slect ...from...where 1=1 看看你的代码是否也有？...UserMapper.xml新增方法： select * from m_user where...%'" /> select * from m_user WHERE `name` LIKE #{pattern} 还有就是script，这个就没有必要在演示了，在工作中基本上用不上

4001 0

极光推送案例

, $all = true) { if(empty($message) || empty($users) || !...$map['user_id'] = array('in', $users); if($all) { $list = M(self::USER_TABLE)->field...(self::USER_REGID_FIELD)->where($map)->select(); } else { $list = M(self::USER_TABLE...)->field(self::USER_REGID_FIELD)->where($map)->limit(1)->order(self::USER_TABLE_ORDER)->select();...)) ->setNotification(M\notification($message)) ->setAudience(M\registration_id

8928 0

Gorm框架学习---CRUD接口之查询

(&user, "10") // SELECT * FROM users WHERE id = 10; db.Find(&users, []int{1,2,3}) // SELECT * FROM users..., "1b74413f-f3b8-409f-ac47-e8c062e3472a") // SELECT * FROM users WHERE id = "1b74413f-f3b8-409f-ac47-...* FROM users WHERE id = 10; var result User db.Model(User{ID: 10}).First(&result) // SELECT * FROM...users WHERE id = 10; ---- 检索全部对象 // Get all records result := db.Find(&users) // SELECT * FROM users;...(&user) // SELECT * FROM users WHERE name = "jinzhu" AND age = 20 ORDER BY id LIMIT 1; // Map db.Where

1K3 0

Microsoft SQL Server手注之布尔型盲注

from syscolumns where id =(select id from sysobjects where name = 'users') and unicode(substring(name...from syscolumns where id =(select id from sysobjects where name = 'users') and unicode(substring(name...from syscolumns where id =(select id from sysobjects where name = 'users') and unicode(substring(name...1 name from syscolumns where id=(select id from sysobjects where xtype=0x75 and name='users')),2,1))...((select top 1 name from syscolumns where id=(select id from sysobjects where xtype=0x75 and name='users

3.7K2 0

gorm之CURD-查询篇

`id` ASC LIMIT 1 db.First(&user, 1) //查询id为1的最后一位用户逆序 //SELECT * FROM `users` WHERE `users`....`id` DESC LIMIT 1 db.Last(&user, 1) //Where 条件查询 //SELECT * FROM `users` WHERE `users`....//SELECT * FROM `users` WHERE `users`....`id` IN (8,9))) db.Where([]int{8, 9}).Find(&userSlice) // not in //SELECT * FROM `users` WHERE...`id` NOT IN (8,9))) db.Not([]int{8, 9}).Find(&userSlice) //or查询 //SELECT * FROM `users` WHERE

9281 0

【测试SQLite】测试SQLite支持的SQL语句分类

* FROM users WHERE username = 'transaction_user'; SELECT * FROM orders WHERE user_id = (SELECT id FROM...((SELECT id FROM orders WHERE user_id = (SELECT id FROM users WHERE username = 'multi_savepoint_user...FROM (SELECT * FROM users WHERE id IN (SELECT user_id FROM orders WHERE total > 1000)...SELECT * FROM users WHERE EXISTS (SELECT 1 FROM orders WHERE orders.user_id = users.id); 模糊查询 -- 示例1：...SELECT username FROM users WHERE EXISTS (SELECT * FROM orders WHERE orders.user_id = users.id); --

2980 0

Microsoft SQL Server手注之延时型时间盲注

select top 1 name from syscolumns where id =(select id from sysobjects where name = 'users') and unicode...(select top 1 name from syscolumns where id =(select id from sysobjects where name = 'users') and unicode...((select top 1 name from syscolumns where id=(select id from sysobjects where xtype=0x75 and name='users...top 1 name from syscolumns where id=(select id from sysobjects where xtype=0x75 and name='users') and...((select top 1 name from syscolumns where id=(select id from sysobjects where xtype=0x75 and name='users

8.5K4 1

点击加载更多

扫码

添加站长进交流群

领取专属 10元无门槛券

手把手带您无忧上云