Bind data with PDOStatement?

Question

Please help me, I can't using bindValue() in PDOStatement.

        $statement = self::$dbConn->prepare("SELECT  * FROM :tableDB WHERE id = :id");
        $statement->bindValue(":id", $id, PDO::PARAM_INT);
        $statement->bindValue(":tableDB", $tableDB, PDO::PARAM_STR);
        $statement->execute();
        $statement->setFetchMode(PDO::FETCH_ASSOC);
        $result = $statement->fetchAll();

When i run this script.

        $statement = self::$dbConn->prepare("SELECT  * FROM :tableDB WHERE id = :id");
        $statement->bindValue(":id", $id, PDO::PARAM_INT); // Return true
        $statement->bindValue(":tableDB", $tableDB, PDO::PARAM_STR); // Return true

But when run to:

$statement->execute(); // Return false.

vee · Accepted Answer · 2013-12-01T21:33:28.230

1

You're binding table name. You cannot do that.

Use the table name directly in the query as follows:

$statement = self::$dbConn->prepare("SELECT  * FROM table_name WHERE id = :id");
$statement->bindValue(":id", $id, PDO::PARAM_INT);
// $statement->bindValue(":tableDB", $tableDB, PDO::PARAM_STR); <-- Remove this line

Update: Replaced query to use table name instead of variable.

edited Dec 01 '13 at 21:33

answered Dec 01 '13 at 10:18

vee

38,255
7
74
78

Thanks for reply, I have remove this. But it show error: Warning: PDOStatement::execute(): SQLSTATE[HY093]: Invalid parameter number: number of bound variables does not match number of tokens ... Pls help :( – Andrew Nguyen Vo Dec 01 '13 at 10:35
Ok Thanks you. I miss syntax $statement = self::$dbConn->prepare("SELECT * FROM $tableDB WHERE id = :id"); I replace = : to =: :) Thanks! – Andrew Nguyen Vo Dec 01 '13 at 10:41
Using the table name directly in the query is dangerous and error prone. – Your Common Sense Dec 01 '13 at 11:48
@YourCommonSense, using a variable might be but not table name. – vee Dec 01 '13 at 11:50
Correct yourself, not me. I just used the exact wording of yours. – Your Common Sense Dec 01 '13 at 12:23

Bind data with PDOStatement?

1 Answers1