using bind_param with mysqli_query

Question

I want bind input from user befor add data to database , I wrote this code but I don't know how I complete it

$con=mysqli_connect('localhost', 'root', '', 'user');
$con->set_charset("utf8");
$result = mysqli_query($con,("INSERT INTO users(name, email, user_phone_number, password) VALUES (?,?,?,?)");

user input $name , $email , $user_phone_number , $password this pramter I don't want add directly to my database for that I used ????

in PDO I use bindValue but here what I should do ?

Do spend the time to go through the manual first php.net/manual/en/mysqli.quickstart.prepared-statements.php - There also isn't enough code in your question to support it. — Funk Forty Niner
– Funk Forty Niner, Commented Aug 12, 2016 at 13:55

Nisse Engström · Accepted Answer · 2017-10-01 15:32:01Z

3

You don't use mysqli_query() with prepared statements, you use mysqli_prepare().

$stmt = mysqli_prepare($con, "INSERT INTO users(name, email, user_phone_number, password) VALUES (?,?,?,?)");
mysqli_stmt_bind_param($stmt, "ssss", $name, $email, $user_phone_number, $password);
$result = mysqli_stmt_execute($stmt);

edited Oct 1, 2017 at 15:32

Nisse Engström

4,76323 gold badges29 silver badges44 bronze badges

answered Aug 12, 2016 at 14:46

Barmar

789k57 gold badges554 silver badges668 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

using bind_param with mysqli_query

1 Answer 1

Comments

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Linked

Related