php prepared statement

Question

It does not print the result. Dont know why. Everything is neatly commented

I get no error displays, no syntax blasphemes, it just does not print any result. However, I do know that the values are passed by the form to this processing php page, so the error is not in there. In the DB I have encrypted all fields except 'company'- Thus, I want to see if this will work by trying to fetch the results back.

// 1. Creating a new server connection

$db = new mysqli('localhost', 'root', '', 'developers');
if ($db->connect_errno) {
    printf("Connect failed: %s\n", $mysqli->connect_error);
    exit();
}
// 2, Creating statement object
$stmt = $db->stmt_init();

// 3, Creating a prepared statement
if($stmt->prepare("SELECT company FROM accesoweb WHERE username = AES_DECRYPT(?, 'salt')")) {

//4. Binding the variable to replace the ?
    $stmt->bind_param('s', $username);

    printf("Error: %d.\n", $stmt->errno);


// 5. Executing query
    $stmt->execute();


// 6. Binding the result columns to variables
    $stmt->bind_result($company); 


// 7. Fetching the result of the query
    while($stmt->fetch()) {
        echo $company; 
    }

// 8. Closing the statement object
   $stmt->close();

// 9. Closing the connection

 $mysqli->close();

}

The inserting code that I just included in the MySQL was:

INSERT INTO accesoweb (company, username,email,password)
VALUES
 ('hola',
AES_ENCRYPT('maria','salt'),
AES_ENCRYPT('sumail','salt'),
AES_ENCRYPT('password',' salt')


);

So, that row above(actually, the "company" is what I am trying to recover through the PHP code

Is PHP or the webserver configured to output errors? Try a simpler script with debug trace and progressively add the code to see which line it fails on. — Jake
– Jake, Commented May 27, 2012 at 16:47
well, it does complain when i write wrong, it has been complaining all day, it is just that it stopped because 'presumably' i wiped all errors. In fact, I have this: error_reporting(E_ALL | E_STRICT); ini_set('display_errors', 'On'); at the top of my script — iaintunderstand
– iaintunderstand, Commented May 27, 2012 at 16:50
If I remember correctly, prepare is a method of the MySQLi object, not the MySQLiStatement object. — Madara's Ghost
– Madara's Ghost, Commented May 27, 2012 at 16:57
@Truth Both objects have a prepare() method, MySQLi::prepare() is just a shortcut so you don't have to call stmt_init(). I suspect you're thinking in PDO. — DaveRandom
– DaveRandom, Commented May 27, 2012 at 17:03
@iaintunderstand Your problem is most likely that the query returned no results - check the value of $stmt->num_rows to confirm. — DaveRandom
– DaveRandom, Commented May 27, 2012 at 17:06

dev-null-dweller · Accepted Answer · 2012-05-27 17:40:30Z

3

SELECT company FROM accesoweb WHERE username = AES_DECRYPT(?, 'salt')

Should be

SELECT company FROM accesoweb WHERE username = AES_ENCRYPT(?, 'salt')

OR

SELECT company FROM accesoweb WHERE AES_DECRYPT(username, 'salt') = ?

answered May 27, 2012 at 17:40

dev-null-dweller

29.5k3 gold badges68 silver badges87 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

iaintunderstand Over a year ago

Bingo man! It is now 20:51. Been with it, since 09:00 writing the full code, going nuts through the internet for lack of a reliable example. That is why a book is so necessary. I could not find a reliable comprehensive tutorial so I had no way to learn, but by trial and error and bits here and there. Than you!!

Jake Over a year ago

that's a terrible logic bug to spot!

Collectives™ on Stack Overflow

php prepared statement

}

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

}

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related