showing data from database using bindParam

Question

i want to try to showing my data from database using bindParam but i get some error.

Recoverable fatal error: Object of class PDOStatement could not be converted to string in C:\xampp\htdocs\piratefiles\search.php on line 15

here my code

$category = htmlentities($_GET['c']);
$query = htmlentities($_GET['q']);

$page = (isset($_GET['page'])) ? $_GET['page'] : 1;
$limit = 20;
$limit_start = ($page - 1) * $limit;

$query = $db->prepare ("SELECT * FROM `posting` WHERE 'category' = :category AND 'file_name' like :query ORDER BY date DESC LIMIT ".$limit_start.",".$limit);

$query->bindParam(":category", $category);
$query->bindParam(":query", $query);

$query->execute();

You're overwriting the $query-variable with your prepared statement. First you have $query = htmlentities($_GET['q']);, then you have $query = $db->prepare(...) and last you have $query->bindParam(":query", $query);. Use different variable names for different things. — M. Eriksson
– M. Eriksson, Commented Dec 31, 2017 at 2:19
ah,i forget it. thanks. but im add some code sice im using LIKE. edit my question. now working good. — jazuly aja
– jazuly aja, Commented Dec 31, 2017 at 2:28

Lawrence Cherone · Accepted Answer · 2017-12-31 02:21:02Z

4

$query was the user input, then you assigned it as the PDOStatement, then your the passing it back to bindParam

Change the var name.

$category = htmlentities($_GET['c']);
$query = htmlentities($_GET['q']);

$page = (isset($_GET['page'])) ? $_GET['page'] : 1;
$limit = 20;
$limit_start = ($page - 1) * $limit;

$stmt = $db->prepare ("SELECT * FROM `posting` WHERE 'category' = :category AND 'file_name' like :query ORDER BY date DESC LIMIT ".$limit_start.",".$limit);

$stmt->bindParam(":category", $category);
$stmt->bindParam(":query", $query);

$stmt->execute();

answered Dec 31, 2017 at 2:21

Lawrence Cherone

46.7k7 gold badges66 silver badges107 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

jazuly aja · Accepted Answer · 2017-12-31 02:33:57Z

0

Since im using LIKE so, need to make another variable.

$keyword1 = "%".$category."%";
$keyword2 = "%".$query1."%";

Here's Full code.

$category = htmlentities($_GET['c']);
$query1 = htmlentities($_GET['q']);

$page = (isset($_GET['page'])) ? $_GET['page'] : 1;
$limit = 20;
$limit_start = ($page - 1) * $limit;

$query = $db->prepare ("SELECT * FROM `posting` WHERE category LIKE :category AND file_name LIKE :query1 ORDER BY date DESC LIMIT ".$limit_start.",".$limit);

$keyword1 = "%".$category."%";
$keyword2 = "%".$query1."%";

$query->bindParam(":category", $keyword1);
$query->bindParam(":query1", $keyword2);

$query->execute();

answered Dec 31, 2017 at 2:33

jazuly aja

892 silver badges11 bronze badges

1 Comment

Lawrence Cherone Over a year ago

Yeah that's fine, you could also use bindValue and not need to define other temp variables, or even pass an array with everything in to execute. But that wasn't the original problem.

Collectives™ on Stack Overflow

showing data from database using bindParam

2 Answers 2

Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related