PHP准备了多个LIKE条件的SQL

Question

I want to do a search in a table with search words defined by a user. I'm doing this by splitting the string an constructing the sql.

But i can't seem to make it work. It works fine, if only one word is entered, but with two or more words it's crashing.

$q = $_GET['q']; //Search word
$q = htmlspecialchars($q);
$q_exploded = explode ( " ", $q );
foreach( $q_exploded as $search_each ) {         
    $where .= "content LIKE ? OR ";
    $bind  .= "s";
    $param .= "%$search_each%, ";
} 

$where = rtrim($where,'OR ');
$param = rtrim($param,', ');

$sql = "SELECT ads_id FROM search_index WHERE ".$where."";
echo $sql . "<br>".$param."<br>".$bind."<br>";

$stmt = $dbconn->prepare($sql);
$stmt->bind_param($bind, $param);
$stmt->execute();
$result = $stmt->get_result();

while ($row = $result->fetch_assoc()) {
    echo $row['ads_id'];
}

This is my error

SELECT ads_id FROM search_index WHERE content LIKE ? OR content LIKE ?

%word1%, %word2%

ss

Warning: mysqli_stmt::bind_param(): Number of elements in type definition string doesn't match number of bind variables

Answer 1

You issue is here:

$stmt->bind_param($bind, $param);

What you're doing is:

$stmt->bind_param("ss", $param);

While you may intend param to satisfy both of the strings it doesn't you need to pass a variable for each one. I would try looking into explode for this.