public static function loadImageDataListByIdSet(PDO $dbConnection, array $imageIdSet) { // TODO filter image id set to protect against SQL injection $dbQueryString = 'SELECT * FROM image_data WHERE id IN ('; $imageIdSetSize = count($imageIdSet); for ($i = 0; $i < $imageIdSetSize; $i++) { $dbQueryString .= $imageIdSet[$i]; if ($i < $imageIdSetSize - 1) { $dbQueryString .= ','; } } $dbQueryString .= ')'; $preparedStatement = $dbConnection->prepare($dbQueryString); $preparedStatement->execute(); $imageDataResultList = array(); $resultRow = NULL; while ($resultRow = $preparedStatement->fetch(PDO::FETCH_ASSOC)) { $imageDataResultList[] = ImageData::populateImageDataByDbResultRow($resultRow, $dbConnection); } $preparedStatement = NULL; return $imageDataResultList; }