PHP PDO query return null

Question

Hi I have an issue while using PDO, I am new to this. The query return null array if I using the first method:

try {
    $r = "SELECT * FROM `order` WHERE `id` = :id AND `key` = :key LIMIT 1";
    $r_do = $db->prepare($r);
    $r_do->bindParam(':id', $id, PDO::PARAM_STR);
    $r_do->bindParam(':key', $key, PDO::PARAM_STR);
    $r_do->execute();
    $f2 = $r_do->fetch();
} catch(PDOException $r) {
  $log->logError($r." - ".basename(__FILE__));
}

where $id is integer and $key is an ecrypted string e.g iGkGNI1NEzCZ6k9g9xC+m8hNm22G3DXsNoEqdwNkTc0=

The value come from an URL

signin.php?id=10&key=iGkGNI1NEzCZ6k9g9xC+m8hNm22G3DXsNoEqdwNkTc0=

If i directly replace the prepared statement with it value, the query will return the result.

$r = "SELECT * FROM `order` WHERE `id` = '10' AND `key` = 'iGkGNI1NEzCZ6k9g9xC+m8hNm22G3DXsNoEqdwNkTc0=' LIMIT 1";

Any idea? For your info I am using Webmatrix as IDE with PHP on Windows 7 64-bit

Could you var_dump($key)? With + and = in the text, it might be being converted for you somewhere along the way. — andrewsi
– andrewsi, Commented Aug 21, 2013 at 15:29
return string(44) "iGkGNI1NEzCZ6k9g9xC m8hNm22G3DXsNoEqdwNkTc0=" When I use die(var_export($db->errorinfo(), TRUE)); it return array ( 0 => '00000', 1 => NULL, 2 => NULL, ) — Fadli Saad
– Fadli Saad, Commented Aug 21, 2013 at 15:31
Yeah, it's getting editted - see that space in the middle, where your + was? You need to run the code through urlencode() on the page where you're generating the link; and urldecode() on this page: php.net/manual/en/function.urlencode.php — andrewsi
– andrewsi, Commented Aug 21, 2013 at 15:34
Thanks @andrewsi !! I've spent the whole day figuring out this. You're my savior. — Fadli Saad
– Fadli Saad, Commented Aug 21, 2013 at 15:42
You're welcome - sometimes it just takes another pair of eyes. — andrewsi
– andrewsi, Commented Aug 21, 2013 at 15:42

andrewsi · Accepted Answer · 2013-08-21 15:40:51Z

2

signin.php?id=10&key=iGkGNI1NEzCZ6k9g9xC+m8hNm22G3DXsNoEqdwNkTc0=

The problem is this. When the value of key is read, that + is being interpreted as a space.

To get around that, on the page that generates the link, you need to call urlencode() - that will encode the characters properly, and should give you something like:

signin.php?id=10&key=iGkGNI1NEzCZ6k9g9xC%2Bm8hNm22G3DXsNoEqdwNkTc0=

In this page, you can get the correct value of id by running it through urldecode().

answered Aug 21, 2013 at 15:40

andrewsi

10.7k132 gold badges37 silver badges52 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Dragony · Accepted Answer · 2013-08-21 15:30:00Z

0

You should probably be using

PDO::PARAM_INT

Instead of

PDO::PARAM_STR

For your ID, since it's an Int.

answered Aug 21, 2013 at 15:30

Dragony

1,72211 silver badges20 bronze badges

Comments

Fadli Saad · Accepted Answer · 2013-08-21 15:48:55Z

0

Thanks to @andrewsi for the thought. Send the encrypted string with urlencode() then add urldecode() to retrieve the string.

Note: However, + symbol still not working. I've made few more data with + and the result still null eventhough encode/decode is working.

answered Aug 21, 2013 at 15:48

Fadli Saad

2221 gold badge3 silver badges14 bronze badges

Collectives™ on Stack Overflow

PHP PDO query return null

3 Answers 3

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related