Using a PDO COUNT query with parameters

Question

I have the following PDO query set up:

$CHECK_MATCH = $DBH->query("
    SELECT COUNT(*) as matches FROM users WHERE 
        username = :username AND password = :password
");
$CHECK_MATCH->bindParam(':username', $username);
$CHECK_MATCH->bindParam(':password', $password);

However, I recieve an error saying:

Fatal error: Call to a member function bindParam() on a non-object

Why doesn't this work?
How would I retrieve the required values from the statement if i used prepare instead of query?

Why don't you enable PDO warnings? ->query is meant for direct execution, not statement preparation. — mario
– mario, Commented Sep 9, 2014 at 16:27
I used ->query so that I could grab values from the results. How would I get those values using a prepared statement? — proPhet
– proPhet, Commented Sep 9, 2014 at 16:29
You can get those values using $row = $CHECK_MATCH->fetch(PDO::FETCH_OBJ) — Hasib Mahmud
– Hasib Mahmud, Commented Sep 9, 2014 at 16:31

Hasib Mahmud · Accepted Answer · 2014-09-09 16:50:13Z

3

I think this answer is not necessary because Marc B's answer actually solve the prob. Well, since @proPhet requested for a complete solution, here it is:

$CHECK_MATCH = $DBH->prepare("SELECT COUNT(*) as matches FROM users WHERE 
    username = :username AND password = :password");
$CHECK_MATCH->bindParam(':username', $username);
$CHECK_MATCH->bindParam(':password', $password);

$CHECK_MATCH->execute();
// Fetch as object
$row = $CHECK_MATCH->fetch(PDO::FETCH_OBJ);

echo $row->matches;

answered Sep 9, 2014 at 16:50

Hasib Mahmud

7861 gold badge10 silver badges29 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Marc B · Accepted Answer · 2014-09-09 16:28:26Z

3

You didn't prepare a statement. You DIRECTLY executed a query. Since a placeholder-using query is NOT a valid query as far as ->query() is concerned, the query failed, and returned a boolean FALSE. You then took that boolean FALSE and tried to treat it as an object.

The proper sequence is:

$stmt = $dbh->prepare('.... your query here ...');
              ^^^^^^^----note the new method call
$stmt->bindParam(...);

$stmt->execute();

answered Sep 9, 2014 at 16:28

Marc B

362k44 gold badges433 silver badges508 bronze badges

Comments

Sal00m · Accepted Answer · 2014-09-09 16:28:47Z

0

You need to prepare the query:

$CHECK_MATCH = $DBH->prepare("  <------ Changed query for prepare
    SELECT COUNT(*) as matches FROM users WHERE 
        username = :username AND password = :password
");
$CHECK_MATCH->bindParam(':username', $username);
$CHECK_MATCH->bindParam(':password', $password);

answered Sep 9, 2014 at 16:28

Sal00m

2,9143 gold badges24 silver badges33 bronze badges

Collectives™ on Stack Overflow

Using a PDO COUNT query with parameters

3 Answers 3

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related