MySQLi 中的预处理语句

Question

我在准备好的语句（MySQLi）中进行 SQL 查询

这是查询

$register = $friend_zone->prepare("INSERT INTO users (name, username, password, email, security_answer, date, user_level, security_question) VALUES(?, ?, ?, ?, ?, ?, ?, ?)");
$register->bind_param($name, $username, $password, $email, $security_answer, $date, $user_level, $security_question);

$register->execute();

我收到警告

Warning: mysqli_stmt::bind_param(): Number of elements in type definition string doesn't match number of bind variables in /var/www/includes/functions.php on line 152 Notice: Undefined variable: result in /var/www/includes/functions.php on line 159 

有人可以帮忙吗？

Answer 1

您使用了错误的bind_param() 函数。第一个参数是一个包含数据类型的字符串。例如：

$register->bind_param('ssssssis', $name, $username, $password, $email, $security_answer, $date, $user_level, $security_question);

每个字母对应于它各自的变量。 s 用于字符串，i 用于整数。还有其他一些可用的。

Answer 2

试试：

$register = $friend_zone->prepare("INSERT INTO users (name, username, password, email, security_answer, date, user_level, security_question) VALUES(?, ?, ?, ?, ?, ?, ?, ?)");
$register->execute( array($name, $username, $password, $email, $security_answer, $date, $user_level, $security_question) );