call_user_func_array() - Warning: mysqli_stmt::bind_param(): Number of variables doesn't match number of parameters in prepared statement

Question

I am trying to bind parameters dynamically using an array. This is the part of my code which is important and also shows debugging info:

$params = array_merge( array( $one ), array_values( $two ) );
echo '<pre>';
echo $query . '<br><br>';
print_r( $params );
call_user_func_array( array( &$stmt, 'bind_param' ), MakeValuesReferenced( $params ) );

This is the debugging info:

As you can see there are three question marks in my query, and three parameters added to bind_param. I thought this should be working. What am I doing wrong?

chris85 · Accepted Answer · 2016-06-07 23:01:45Z

1

You can't quote the placeholder, that makes it the literal value and not a placeholder. Move the time into the binding and leave the placeholders on their own.

e.g.

where thedateandtime between ? and ?

then in the bind

($date . ' 00:00:00')

You also can't bind columns so the order by should be altered. Use a whitelist to compare the values before passing it into the query.

answered Jun 7, 2016 at 23:01

chris85

23.9k7 gold badges36 silver badges51 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

call_user_func_array() - Warning: mysqli_stmt::bind_param(): Number of variables doesn't match number of parameters in prepared statement

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related