Warning: mysqli_stmt::bind_param(): Number of variables doesn't match number of parameters in prepared statement

Question

I receive the following error:

Warning: mysqli_stmt::bind_param(): Number of variables doesn't match number of parameters in prepared statement

I am having trouble binding and executing the prepare statement. The connection to the database is succesfully established and it does manage to insert it into the database with the initial value of ?

Below is the code:

// Set up the query
$insert = "INSERT INTO record_user (ip,country,address,stack,skills,employment_type,city_selection,landing_time,submission_time,time_spent) 
VALUES ('?','?','?','?','?','?','?','?','?','?')";


// Prepare the statement
$insert = $con->prepare($insert);

// Bind the statement
$insert->bind_param("ssssssssss", $user_ip, $country, $location, $stack, $skills, $employment, $city, $landing_time, $submission_time, $time_spent);

// Execute the statement
$insert->execute();

// Close the statement connection
$insert->close();

// Close the database connection
$con->close();

Don't put the `?` in quotes. The framework does all the escaping for you — juergen d, Oct 02 '15 at 16:27

DirtyBit · Answer 1 · 2015-10-02T18:57:38.813

1

Lose the quotes around ? and use 10 params instead of 11

Instead of this:

$insert = "INSERT INTO record_user (ip,country,address,stack,skills,employment_type,city_selection,landing_time,submission_time,time_spent) 
VALUES ('?','?','?','?','?','?','?','?','?','?')";
$insert = $con->prepare($insert);
$insert->bind_param("ssssssssss", $user_ip, $country, $location, $stack, $skills, $employment, $city, $landing_time, $submission_time, $time_spent);

Try this:

$insert = "INSERT INTO record_user (ip,country,address,stack,skills,employment_type,city_selection,landing_time,submission_time,time_spent)
VALUES (?,?,?,?,?,?,?,?,?,?)";
$insert = $con->prepare($insert);
$insert->bind_param("ssssssssss", $user_ip, $country, $location, $stack, $skills, $employment, $city, $landing_time, $submission_time, $time_spent);

edited Oct 02 '15 at 18:57

answered Oct 02 '15 at 16:30

DirtyBit

16,613
4
34
55

thanks what happen to the 10s? – Jon220 Oct 02 '15 at 16:34
Ah! The 10 s's where being seen as a parameter (which they were in the context) Adding up to 11 parameters instead of the expected 10 – Julio Soares Oct 02 '15 at 16:43
thanks for the explanation. I now get this error Call to a member function bind_param() on a non-object in – Jon220 Oct 02 '15 at 17:00
Why did you get rid of the `ss...ss`? MySQLi's `bind_param` *requires* that: http://php.net/manual/en/mysqli-stmt.bind-param.php – gen_Eric Oct 02 '15 at 18:55
@Jon220: Add this: `if($insert === FALSE){ die($con->error); }`. – gen_Eric Oct 02 '15 at 18:56
@RocketHazmat Ahh, Craps. I did not see that when editing. Thank you. Fixed it. – DirtyBit Oct 02 '15 at 18:58
@Jon220 Make sure the [type specification chars match properly](http://php.net/manual/en/mysqli-stmt.bind-param.php) `;-)` – DirtyBit Oct 02 '15 at 19:01

score 0 · Answer 2 · answered Oct 02 '15 at 16:28

Your prepared query doesn't have any placeholders. You are inserting 10 literal ? characters into your database.

You need to lose the quotes around the ?s:

$insert = "INSERT INTO record_user (ip,country,address,stack,skills,employment_type,city_selection,landing_time,submission_time,time_spent)
    VALUES (?,?,?,?,?,?,?,?,?,?)";

Warning: mysqli_stmt::bind_param(): Number of variables doesn't match number of parameters in prepared statement

2 Answers2

Linked

Related