PHP PDO prepared statement — MySQL LIKE query

by 
$ret = $prep->execute(array(':searchTerm' => '"%'.$searchTerm.'%"'));

This is wrong. You don’t need the double quotes.

WHERE hs.hs_text LIKE ":searchTerm" 
$ret = $prep->execute(array(':searchTerm' => '%'.$searchTerm.'%'));

This is also wrong.
Try with:

$prep = $dbh->prepare($sql);
$ret = $prep->execute(array(':searchTerm' => '%'.$searchTerm.'%'));

Explanation: Prepared statements don’t simply do a string-replace. They transport the data completely separate from the query. Quotes are only needed when embedding values into a query.

More Related Contents:

  1. Insert form in MySQL with PDO [duplicate]
  2. Undefined index $_POST
  3. How to check if a row exists in MySQL? (i.e. check if username or email exists in MySQL)
  4. Getting raw SQL query string from PDO prepared statements
  5. How do I set ORDER BY params using prepared PDO statement?
  6. “Invalid parameter number: parameter was not defined” Inserting data
  7. Having issue with matching rows in the database using PDO
  8. How can I properly use a PDO object for a parameterized SELECT query
  9. How do I return integer and numeric columns from MySQL as integers and numerics in PHP?
  10. PDO with INSERT INTO through prepared statements [closed]
  11. PDO::fetchAll vs. PDO::fetch in a loop
  12. PHP Connection failed: SQLSTATE[HY000] [2002] Connection refused
  13. Resetting array pointer in PDO results
  14. Real escape string and PDO [duplicate]
  15. PDO multiple queries
  16. PHP PDO vs normal mysql_connect
  17. Can I create a database using PDO in PHP?
  18. How to bind parameters to a raw DB query in Laravel that’s used on a model?
  19. PDO::PARAM for type decimal?
  20. PHP PDO and MySQLi [duplicate]
  21. PDO fetch one column from table into 1-dimensional array
  22. Update query with PDO and MySQL
  23. Is “SET CHARACTER SET utf8” necessary?
  24. Getting a PHP PDO connection from a mysql_connect()?
  25. Having issue with matching rows in the database
  26. Set PDO to throw exceptions by default [duplicate]
  27. PDO: MySQL server has gone away
  28. Checking for an empty result (PHP, PDO, and MySQL) [duplicate]
  29. PHP/SQL Insert Error when using Named Placeholders
  30. Is a BLOB converted using the current/default charset in MySQL?

Leave a Comment