如何在php的mysql查询中使用占位符

Question

I am trying to make a prepared query like this one:

$stmt=$mysqli->prepare("SELECT zonasrepartoid, calle, municipio, codigopostal FROM zonasreparto WHERE municipio like concat('%',:m,'%')")
                $stmt->bind_param(':m',$incity);
                $stmt->execute();

I have tried to use the % many times in different ways, but i have no more ideas of how to use it, just to make it work. If any one could tell me what is wrong i would appreciate that.

Thank you in advance!

Answer 1

Surround your input by % instead of putting it into the query:

... WHERE municipio like ?")

$stmt->bind_param('s', '%' . $incity . '%');

The syntax of putting in named placeholders is supported by the PDO library, not MySQLi. With MySQLi, the first param indicates the type of variable (eg i = integer, s = string, etc).

Answer 2

It makes me wonder where did you get that idea of using ":letter" placeholders with raw mysqli.

Nowhere in the manual can be seen such a syntax. The rest of your approach is okay.

$sql = "SELECT zonasrepartoid, calle, municipio, codigopostal FROM zonasreparto 
        WHERE municipio like concat('%',?,'%')"
$stmt=$mysqli->prepare($sql);
$stmt->bind_param('s', $incity);
$stmt->execute();

You really, really, really need to exercise with manual examples instead of blindly shooting with random syntax. That's your main and the only problem.