如何在php的mysql查询中使用占位符

Question

I am trying to make a prepared query like this one:

$stmt=$mysqli->prepare("SELECT zonasrepartoid, calle, municipio, codigopostal FROM zonasreparto WHERE municipio like concat('%',:m,'%')")
                $stmt->bind_param(':m',$incity);
                $stmt->execute();

I have tried to use the % many times in different ways, but i have no more ideas of how to use it, just to make it work. If any one could tell me what is wrong i would appreciate that.

Thank you in advance!

Answer 1

Surround your input by % instead of putting it into the query:

... WHERE municipio like ?")

$stmt->bind_param('s', '%' . $incity . '%');

The syntax of putting in named placeholders is supported by the PDO library, not MySQLi. With MySQLi, the first param indicates the type of variable (e.g. i = integer, s = string, etc).