Quotes in query

[eluser]Tpojka[/eluser]
[quote author="ivantcholakov" date="1382359911"]This is what you know, I can't tell. Where does the list of zip-codes come from? From the database, from a text file, from a PHP hard-coded array/string? Who makes/updates this list? And in time this situation may change.[/quote]

Exactly.

Btw, I am realizing that $array is processed with some kind of function before passing in query, i.e:

Code:

$zipcodes = $this-input->post['zipcodes'];
do_process($array)
{
  foreach($array as &$elem)
  {
    // make any escaping, checking or needed function
  }
  return $array;
}

$zipcodes = do_process($zipcodes);
SELECT * FROM (`TABLE`) WHERE `Zipcode` IN ('$zipcodes');