SQLSTATE [42000]：語法錯誤或訪問沖突：1064 PDO

Question

每當我使用Mysql PDO類時，都會得到此信息：

SQLSTATE[42000]: Syntax error or access violation: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '? WHERE ?' at line 1

這是代碼：

function mysql_execute_safe_search($table, $where, $query){
    global $db;

    try{
        $preparedQuery = $db->prepare("SELECT * FROM ? WHERE ?");

        $preparedQuery->execute([$table, $where, $query]);
        return $preparedQuery->fetchAll(PDO::FETCH_ASSOC);
    } 

    catch(PDOException $Exception){

        echo $Exception->getMessage();

        return;
    }
}

這是我的執行方式：

$search_query = mysql_execute_safe_search("people", "name", "Nathan");

Answer 1

您不能綁定表名稱：

$preparedQuery = $db->prepare("SELECT * FROM yourtable WHERE ?");