PDO SQL Placeholder issue

Asked Jun 05 '15 at 11:08

Active Jun 05 '15 at 11:10

Viewed 35 times

Can anyone figure out why this code isnt printing the value to the page?

$query_params = array(
            ':test1' => 'test1',
            ':test2' => 'test2'
);

// Count the number of records matching the first quota

$quota1Count = "SELECT COUNT(*)
               FROM :test1
               WHERE :test2 = 1";

try { 

        $stmt = $db->prepare($quota1Count); 
        $stmt->execute($query_params); 

    } 

catch(PDOException $ex) { 

        die("Failed to run query"); 
    } 

$quota1 = $stmt->fetchColumn();

Printing to the page

Quota 1: <?= $quota1; ?>

When I dont use the PDO placeholders the code runs fine and returns the correct value:

$quota1Count = "SELECT COUNT(*)
               FROM test1
               WHERE test2 = 1";

asked Jun 05 '15 at 11:08

d.abyss

3

simple: you can't bind tables and columns – Funk Forty Niner Jun 05 '15 at 11:09
why are you using :table1 instead of table1 in ur PDO query.? – Manashvi Birla Jun 05 '15 at 11:09
@Fred-ii- is right you can bind only value not table or columns.thanks. – Alive to die - Anant Jun 05 '15 at 11:10
@Fred-ii- can you suggest another way to do this then? I would like to be able to define the table/column outside of the statement – d.abyss Jun 05 '15 at 11:12
use a whitelist method. – Funk Forty Niner Jun 05 '15 at 11:13
or pre-define variables. Plus, I've no idea why this question received a vote to reopen. – Funk Forty Niner Jun 05 '15 at 12:11

PDO SQL Placeholder issue

0 Answers0