PHP + PDO: Bind null if param is empty

Question

I'm trying this (and all PoST var are treated before user send it, no SQL Injection worries):

$stmt = $con->prepare($sql);
$stmt->bindParam(":1", $this->getPes_cdpessoa());
$stmt->bindParam(":2", $this->getPdf_nupessoa_def());

When any of those vars are NULL, PDO cries and don't let execute my statement, and on my Table, i DO allow these fields beign nullables.

Is there any way to check if the values are empty, pdo just bind NULL to then (and i mean, a smart way instead if(empty($_POST['blablabla')...) for every single param?

Community · Accepted Answer · 2017-05-23 12:01:09Z

5

Try:

$stmt = $con->prepare($sql);
$stmt->bindParam(':1', $this->getPes_cdpessoa(), PDO::PARAM_NULL);
$stmt->bindParam(":2", $this->getPdf_nupessoa_def(), PDO::PARAM_NULL);

Also, see:

How do I insert NULL values using PDO?

edited May 23, 2017 at 12:01

CommunityBot

11 silver badge

answered Aug 27, 2010 at 18:24

karim79

343k67 gold badges420 silver badges409 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

John Flatness · Accepted Answer · 2010-08-27 18:25:15Z

2

bindParam needs an actual variable to be passed to it, because it creates a reference. So, when your functions return null, bindParam doesn't really have anything valid to do.

You need to use bindValue instead. Note that bindValue will immediately use whatever value you pass to it, where bindParam waits until statement execution to actually retrieve the values to use.

answered Aug 27, 2010 at 18:25

John Flatness

34.1k5 gold badges81 silver badges81 bronze badges

2 Comments

alex Over a year ago

if I use bindValue, all the security of Params are gone. All I wanted to do is Allow nulls..

John Flatness Over a year ago

bindValue still gives you the same prepared-statement-and-placeholder goodness that you get with bindParam. The main differences are the time when the value is actually evaluated, and that you can't get DB output like you can with bindParam.

Theodore R. Smith · Accepted Answer · 2010-08-27 18:28:51Z

0

The Alternative syntax works:

$stmt = $con->prepare($sql);
$stmt->execute(array($this->getPes_cdpessoa(), $this->getPdf_nupessoa_def()));

answered Aug 27, 2010 at 18:28

Theodore R. Smith

23.5k14 gold badges75 silver badges97 bronze badges

Collectives™ on Stack Overflow

PHP + PDO: Bind null if param is empty

3 Answers 3

Comments

2 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related