bind_param（）问题

Question

I am getting issues with the bind_param function. I will post all the information below.

Error:

Fatal error: Call to a member function bind_param() on a non-object in /home4/lunar/public_html/casino/blogpost.php on line 88

MySQL Error:

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ':user, :title, :message, :image, :category, NOW())' at line 1

Query:

    $user = $_COOKIE['user'];
    $title = $_POST['title'];
    $message = $_POST['message'];
    $image = $_POST['image'];
    $category = $_POST['category'];
    $stmt = $mysqli->prepare("INSERT INTO `lunar_casino`.`posts` (`id`, `by`, `title`, `message`, `image`, `category`, `date`) VALUES(NULL, :user, :title, :message, :image, :category, NOW())");
    echo $mysqli->error;
    $stmt->bind_param(":user", $user);
    $stmt->bind_param(":title", $title);
    $stmt->bind_param(":message", $message);
    $stmt->bind_param(":image", $image);
    $stmt->bind_param(":category", $category);
    $stmt->execute();
    if(!$stmt){
      echo "<font color='red'><b>There has been an error with our database! Please contact the website administrator!</b></font><br /><br />";
      echo $mysqli->error;
    } else {
      echo "<font color='green'><b>You have successfully added a blog post!</b></font><br /><br />";
    }

Any ideas why its like this?

Answer 1

As Rocket Hazmat mentioned you can only use question marks as bind parameter place holder. You should do something similar:

 $stmt = $mysqli->prepare("INSERT INTO `lunar_casino`.`posts` (`id`, `by`, `title`, `message`, `image`, `category`, `date`) VALUES(NULL, ?, ?, ?, ?, ?, NOW())");
 $stmt->bind_param("sssss", $user, $title, $message, $image, $category);

More details: http://www.php.net/manual/en/mysqli-stmt.bind-param.php