Check to see if an email is already in the database using prepared statements

by

Should be something like this:

// enable error reporting for mysqli
mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);
// create mysqli object
$mysqli = new mysqli(/* fill in your connection info here */);

$email = $_POST['email']; // might want to validate and sanitize this first before passing to database...

// set query
$query = "SELECT COUNT(*) FROM users WHERE email = ?";

// prepare the query, bind the variable and execute
$stmt = $mysqli->prepare($query);
$stmt->bind_param('s', $email);
$stmt->execute();

// grab the result
$stmt->bind_result($numRows);
$stmt->fetch();

if ($numRows) {
    echo "<p class="red">Email is already registered with us</p>";
} else {
    // ....
}

This link may help you as well:

http://www.php.net/manual/en/mysqli.quickstart.prepared-statements.php

More Related Contents:

  1. Use an array in a mysqli prepared statement: `WHERE .. IN(..)` query [duplicate]
  2. Call to a member function bind_param() on a non-object [duplicate]
  3. mysqli_stmt::bind_result(): Number of bind variables doesn’t match number of fields in prepared statement
  4. How to use mysqli prepared statements?
  5. MySQLi prepared statements error reporting [duplicate]
  6. Example of how to use bind_result vs get_result
  7. How to bind mysqli bind_param arguments dynamically in PHP?
  8. Call to a member function prepare() on a non-object PHP Help
  9. mysqli: can it prepare multiple queries in one statement?
  10. Build SELECT query with dynamic number of LIKE conditions as a mysqli prepared statement
  11. mysqli_stmt::bind_param(): Number of elements in type definition string doesn’t match number of bind variables
  12. PHP UPDATE prepared statement
  13. using nulls in a mysqli prepared statement
  14. mySQLi prepared statement unable to get_result()
  15. MySQLi prepared statements with IN operator [duplicate]
  16. Is mysql_real_escape_string() necessary when using prepared statements?
  17. Using fetch_assoc on prepared statements
  18. store_result() and get_result() in mysql returns false
  19. Using wildcards in prepared statement – MySQLi
  20. bind_param Number of variables doesn’t match number of parameters in prepared statement
  21. How to prepare statement for update query? [duplicate]
  22. Using wildcards in prepared statement
  23. Mysqli Prepare Statement – Returning False, but Why? [duplicate]
  24. How to run the bind_param() statement in PHP?
  25. Is using prepared statements necessary? [duplicate]
  26. Using Prepared Statement, how I return the id of the inserted row?
  27. Should I use mysqli_real_escape_string or should I use prepared statements? [duplicate]
  28. Dynamically bind mysqli_stmt parameters and then bind result
  29. Correct way to use LIKE ‘%{$var}%’ with prepared statements?
  30. PDO error: SQLSTATE[HY000]: General error: 2031

Leave a Comment