Using $_POST to insert into MySQL db w/ PDO Prepared Statements

Question

I'm making a Pastebin-esque project on my free time and it only recently hit me that I need to have a title for the pastes. I'm using PDO, and I pretty much had to redo the entire php script that inserts already, and now I can't figure out what's wrong. Here's the body of my HTML to begin with, paste.html:

<form action="insert.php" method="post">
    Title: <input type="text" name="title">
    <br>
    Paste: <br> <input type="text" name="paste">
    <input type="submit" value="insert">
</form>

And here's my insert.php:

require 'connection.php';

$paste = $_POST['paste'];
$title = $_POST['title'];
$sql = "INSERT INTO pasteinfo (title, paste) VALUES (:title, :paste)";
$stmt = $con->prepare($sql);
$stmt->bindParam(':paste', $paste);
$stmt->bindParam(':title', $title);
$stmt->execute();
$con = null;

I really don't know what's wrong here. Thanks!

EDIT: connection.php looks like this:

try {
    $con = new pdo("mysql:host='';dbname='pastes'",'','','pasteinfo');
    echo "connected successfully";
} catch (PDOException $e) { 
    echo "Connection failed: " . $e->getMessage();
}

@Irvin getMessage(); } ?> Seems like I have two 'pastes' in there, didn't notice that til reading through it for like the 80th time now lol. Could that be the issue? — index.php, Oct 20 '16 at 02:25
So what is the `username`,`password`, and `host` you are using? — Irvin, Oct 20 '16 at 02:27
@Ghost My connection.php which I posted above a few moments ago has it. Didn't get any errors until I tried removing the second 'pastes'. How do I turn it on for PHP? — index.php, Oct 20 '16 at 02:28
@Irvin it worked before I tried to implement 'title'. What do you think is wrong with it? — index.php, Oct 20 '16 at 02:32
@Irvin Sorry, but which part of the new pdo statement is the table? — index.php, Oct 20 '16 at 02:38
I mean your table in the database. Schema? Sometimes those little things are harder to debug. — Irvin, Oct 20 '16 at 02:39
@Irvin http://pastebin.com/SAPx5fkq Is that what you mean? Sorry, I'm a little new to this aha. — index.php, Oct 20 '16 at 02:42
@index.php [here](http://stackoverflow.com/questions/845021/how-to-get-useful-error-messages-in-php) and [here](http://stackoverflow.com/questions/3726505/how-to-squeeze-error-message-out-of-pdo) — Kevin, Oct 20 '16 at 04:03

score 1 · Answer 1 · answered Oct 20 '16 at 02:18

1

Try to do something like that:

$stmt->bindParam(':paste', $paste, PDO::PARAM_STR, 12);
$stmt->bindParam(':title', $title, PDO::PARAM_STR, 12);

Where the third param is the data type and the fourth is the length.

answered Oct 20 '16 at 02:18

Marcel

2,810
2
26
46

1

Doesn't make a difference as far as I can tell. – index.php Oct 20 '16 at 02:21
Remove colon (:) `$stmt->bindParam('paste', $paste, PDO::PARAM_STR, 12); $stmt->bindParam('title', $title, PDO::PARAM_STR, 12);` – SebCar Oct 20 '16 at 02:38
@SebCar Having the same issue still. – index.php Oct 20 '16 at 02:46
Have you tried to catch the error in execution of the stmt? `$paste = $_POST['paste']; $title = $_POST['title']; try{ $sql = "INSERT INTO pasteinfo (title, paste) VALUES (:title, :paste)"; $stmt = $con->prepare($sql); $stmt->bindParam(':paste', $paste); $stmt->bindParam(':title', $title); $stmt->execute();} catch (\Exception $e) { echo $e->getMessage(); } $con = null;` – SebCar Oct 20 '16 at 02:51
@SebCar That's interesting. I have not, but when I did instead of displaying the usual "connected successfully" message nothing was displayed. However, when I tried refreshing it (after removing the code you asked me to put in) I realized that I didn't get a POST prompt, but when your code was in I did? – index.php Oct 20 '16 at 02:57
So, you do not get any errors? You can also see the number of affected rows using this: http://php.net/manual/en/pdostatement.rowcount.php – SebCar Oct 20 '16 at 03:01
@SebCar yeah. But with my whole post thing, does that mean that the HTML is the issue? – index.php Oct 20 '16 at 03:02
@SebCar $stmt->bindParam('title', $title, PDO::PARAM_STR, 12); $stmt->execute(); $count = $stmt->rowcount(); print($count); Didn't get any response. – index.php Oct 20 '16 at 03:04
but you need to put these inside try to see what is going on. The html is fine I think. – SebCar Oct 20 '16 at 03:06
@SebCar what do you mean? – index.php Oct 20 '16 at 03:09
You need to use the code I put in the comment (try...) to see whats the error – SebCar Oct 20 '16 at 03:11
@SebCar Added try to my code for the error thing, didn't get any errors again. My bad for misreading that. – index.php Oct 20 '16 at 03:12
try to use echo or var_dump to know if that part of the code is reached – SebCar Oct 20 '16 at 03:15
@SebCar put an echo just above $con = null; with no response. – index.php Oct 20 '16 at 03:17
Have you tried to check if the request method is POST using: `$_SERVER['REQUEST_METHOD']` ? – SebCar Oct 20 '16 at 12:50

Using $_POST to insert into MySQL db w/ PDO Prepared Statements

1 Answers1