请看下面的代码。 我正在尝试将参数数组绑定到我的prepared statement。 我在网上找了一些资料，发现我必须使用call_user_func_array，但是无法让它正常工作。我得到的错误信息是： “第一个参数应该是一个有效的回调函数，而给出的是'Array'” 我可能错了，但我认为第一个参数可以是一个数组，也许这个错误信息有误导性。我认为问题可能在于我的数组有问题。 有人可以看出我做错了什么吗？谢谢。
$type = array("s", "s");
$param = array("string1","anotherstring");
$stmt = $SQLConnection->prepare("INSERT INTO mytable (comp, addl) VALUES (?,?)");
$params = array_merge($type, $param);
call_user_func_array(array(&$stmt, 'bind_param'), $params);
$SQLConnection->execute();
必须是这样的：
//connect
$mysqli = new mysqli($host, $user, $password, $db_name);
//prepare
$stmt = $mysqli->prepare("SELECT * FROM the_table WHERE field1= ? AND Field2= ?");
//Binding parameters. Types: s = string, i = integer, d = double, b = blob
$params= array("ss","string_1","string_2");
//now we need to add references
$tmp = array();
foreach($params as $key => $value) $tmp[$key] = &$params[$key];
// now us the new array
call_user_func_array(array($stmt, 'bind_param'), $tmp);
$stmt->execute();
/* Fetch result to array */
$res = $stmt->get_result();
while($row = $res->fetch_array(MYSQLI_ASSOC)) {
$a_data[]=$row;
}
print_r($a_data);
$stmt->close();
call_user_func_array()来麻烦操作了。$stmt->bind_param($param_types, $my_params_array);
您只需使用以下代码即可：
$stmt->bind_param($param_types, ...$my_params_array); // exact codebind_param() 构建一个单一的参数数组; 骗局是要将类型字符串连接在元素 [0] 中，而不是将新元素推入数组。 https://dev59.com/iazka4cB1Zd3GeqP72Wk#51036322 - mickmackusa我不知道为什么你必须使用call_user_func_array，但这是另一回事。
在我看来，唯一可能出现的问题是你正在使用对对象的引用。假设你正在使用PHP 5.*，那是不必要的：
call_user_func_array(array($stmt, 'bind_param'), $params);
由于我的问题被标记为重复，无法自己回答这个问题：此处。但是我认为我的最终解决方案（使用此问题中的答案）适用于我的用例，并可能对某些人有所帮助。
我的目标是获取发布的一组ID并在NOT IN MYSQL语句中使用它们。假设发布了5个ID的数组。
Count the number posted ID's to build the ? placeholders for NOT IN statement. Using $params_count = substr(str_repeat(',?', count($array_of_ids)), 1); gives the result: (?,?,?,?,?) to be used in SQL statement.
Make function that takes ID's and type i or s etc. For me, they were all i so my function is simpler. return array that looks like this $params= array("iiiii",1,2,3,4,5) where the first value is the set of i's and the subsequent values are the ID's depending on total ID's passed into function.
function build_bind_params($values, $bind_type) {
$s = substr(str_repeat($bind_type, count($values)), 0);
$bind_array = array();
$bind_array[] = $s;
foreach($values as $value) {
$bind_array[] = $value;
}
return $bind_array;
}
$params = build_bind_params($array_of_ids, "i");
foreach ($params as $key => $value) $tmp[$key] = &$params[$key];来正确格式化新创建的$params以便绑定。call_user_func_array(array($stmt , 'bind_param') , $tmp);来正确地绑定数组。$stmtsubstr([string], 0) 的目的是什么？你正在尝试从零位置到字符串末尾隔离子字符串；因此，子字符串=完整字符串。请编辑以便其他人不会复制粘贴。 - mickmackusa1而不是0。 - Teepeemm/* create a database connection */
$db = new mysqli($host, $user, $password, $db_name);
/* setup the sql, values, and types */
$sql="SELECT * FROM languages
WHERE language_code = ?
AND charset = ?
ORDER BY native_name";
$values = array($langCode, $charset);
$types = "ss";
/* pass those variables to the execute() function defined below */
if ($rows = execute($sql, $values, $types))
{
return $rows[0];
}
function execute($sql, $values='', $types='')
{
/* prepare the sql before binding values and types */
$stmt = $db->prepare($sql);
/*combine the values and types into $inputArray */
$inputArray[] = &$types;
$j = count($values);
for($i=0;$i<$j;$i++){
$inputArray[] = &$values[$i];
}
/* add the combined values and types to call_user_func_array() for binding */
call_user_func_array(array($stmt, 'bind_param'), $inputArray);
$result = $stmt->execute();
return $result;
}
以下是本示例所基于的完整描述的参考链接： http://big.info/2015/08/php-use-call_user_func_array-for-variable-number-of-parameters-arrays-in-prepared-statements.html
call_user_func_array(array($stmt, 'bind_param'), refValues($params));
function refValues($arr){
if (strnatcmp(phpversion(),'5.3') >= 0) {
$refs = array();
foreach($arr as $key => $value)
$refs[$key] = &$arr[$key];
return $refs;
}
return $arr;
}
<?php
# link
$dblink = new mysqli('HOSTNAME','USERNAME','PASSWORD','DATABASENAME');
# example data
$statement = $dblink->prepare("SELECT * from Person WHERE FirstName = ? AND MiddleName = ? AND LastName = ? and Age = ?");
$recordvalues = ['John', 'H.', 'Smith', 25];
$sqlbindstring = "sssi"; # String, String, String, Integer example
# make the references
$bind_arguments = [];
$bind_arguments[] = $sqlbindstring;
foreach ($recordvalues as $recordkey => $recordvalue)
{
$bind_arguments[] = & $recordvalues[$recordkey]; # bind to array ref, not to the temporary $recordvalue
}
# query the db
call_user_func_array(array($statement, 'bind_param'), $bind_arguments); # bind arguments
$statement->execute(); # run statement
$result = $statement->get_result(); # get results
# get the results
if($result) {
while ($row = $result->fetch_assoc()) {
print("\n\nMy row is...");
print_r($row);
}
}
?>
糟糕代码的示例...
<?php
# Same setup as above..
$statement->prepare("SELECT * from Person WHERE FirstName = ? AND MiddleName = ? AND LastName = ? and Age = ?");
$statement->bind('John', 'H.", 'Smith', 25);
?>