Silver89 Silver89 - 7 months ago 48
SQL Question

Using LIKE in bindParam for a MySQL PDO Query

I've read multiple examples on how these queries should be written but I'm struggling to get this specific like to run when using

bindParam


Would this be the correct way to match usernames that begin with a?

$term = "a";
$term = "'$term%'";

$sql = "SELECT username
FROM `user`
WHERE username LIKE :term
LIMIT 10";

$core = Connect::getInstance();

$stmt = $core->dbh->prepare($sql);
$stmt->bindParam(':term', $term, PDO::PARAM_STR);
$stmt->execute();
$data = $stmt->fetchAll();

Answer

No, you don't need the inner single quotes so just $term = "$term%";

The statement you're running now would try to match 'a%' instead of a%

bindParam will make sure that all string data is automatically properly quoted when given to the SQL statement.

Comments