MariaDB statement not compatible with MySQL

Question

Backend is not my strongest background and I'm having troubles executing my php scripts while migrating from MySQL to MariaDB (a must for our server provider). Here is the function I have in my php script that is working with MySQL 5.6 and it's not working with MariaDB (10.1.22-MariaDB-cll-lve - MariaDB Server):

public function getPostByName($postName) {
        $returnValue = array();
        $sql = "SELECT * FROM posts WHERE post_description LIKE ?";
        $statement = $this->conn->prepare($sql);
        if (!$statement)
            throw new Exception($statement->error);

        $postName = "%".$postName."%";
        $statement->bind_param("s", $postName);
        $statement->execute();

        $result = $statement->get_result();
        while($row = $result->fetch_array(MYSQLI_ASSOC)) {
            array_push($returnValue, $row);
        }
        return $returnValue;
}

I have already try most of the options out there but none of them worked (one example: php mysqli prepared statement LIKE). Any suggestion?

Presumably it works if you type the query directly into the Maria DB console? — Strawberry, Jul 07 '17 at 07:24
right, it works if I type: SELECT * FROM posts WHERE post_description LIKE "%birthday%".. — mmsarquis, Jul 07 '17 at 08:27

score 0 · Answer 1 · answered Jul 07 '17 at 16:12

0

Solved:

public function getPostByName($postName){

    $returnValue = array();
    $sql = "SELECT * FROM posts WHERE post_description LIKE '%".$postName."%'";
    $result = $this->conn->query($sql);

    if($result != nill && (mysqli_num_rows($result) >= 1)){
        while($row = $result->fetch_array(MYSQLI_ASSOC)){
            array_push($returnValue, $row);
        }
    }
    return $returnValue;
}

answered Jul 07 '17 at 16:12

mmsarquis

170
3
16

1

so if postName is `Steve';delete from posts;--` would it hurt you? – xQbert Jul 07 '17 at 16:15
That's called "sql injection"; it is nasty. – Rick James Jul 10 '17 at 04:25
`$result != nill` should be `$result === false`. – Rick James Jul 10 '17 at 04:27

MariaDB statement not compatible with MySQL

1 Answers1