我不明白为什么出现Statement :: execute（）错误？

Question

I've a error in my code but I do not find my error... Can you help me please ? here is my code :

$updt=$connect->prepare("INSERT INTO utilisateurs VALUES ('',:nom, :prenom, :email, :identifiant, MD5(:mdp)");

$updt->execute(array('nom'=>$nom,
'prenom'=>$prenom,
'email'=>$email,
'identifiant'=>$identifiant,
'mdp'=>$motDePasse
));

header('./gestion-utilisateur.php');</pre>

And this is the error :

Warning: PDOStatement::execute(): SQLSTATE[42000]: Syntax error or access violation: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 2 in...

Thank in advance for your help.

Answer 1

Try this instead:

 $updt=$connect->prepare("INSERT INTO utilisateurs VALUES ('',:nom, :prenom, :email, :identifiant, :mdp)");

$updt->execute(array('nom'=>$nom,
'prenom'=>$prenom,
'email'=>$email,
'identifiant'=>$identifiant,
'mdp'=>MD5($motDePasse)
));

header('./gestion-utilisateur.php');

Answer 2

Might be this will help you

$updt=$connect->prepare("INSERT INTO utilisateurs VALUES ('',:nom, :prenom, :email, :identifiant, MD5(:mdp))");
// I think u missed one parathesis at the last thats it                                                    ^ 

Answer 3

In this statement

$updt=$connect->prepare("INSERT INTO utilisateurs 
                         VALUES ('',:nom, :prenom, :email, 
                                 :identifiant, MD5(:mdp)");

I assume that the first field you pass '' to is a auto increment field something like id .

Becasue you dont pass a field list to the query, you are also asking MySQL to work out what fields to add the data to automatically and it will do that by looking at the schema and getting field names for that table in the order they are stored in the schema. This can be dangerous as it is quite possible for someone else to change the order that they are stored in, in the schema.

So it is better to add the field names that you want to insert into the query.

MySQL will look after the auto increment field for you, but now it knows what fields it should be inserting data into from your VALUE list.

So use :-

$updt=$connect->prepare("INSERT INTO utilisateurs 
                         (nom,prenom,email,identifiant,mdp) 
                         VALUES (:nom, :prenom, :email, 
                                 :identifiant, MD5(:mdp)");