Search code examples
phpprepared-statementsql-injection

how to add two php variables in one database column while using prepare statement

Iam using this for simple query

for($i = 1; $i <= $Seats; $i++)
    {
    $insert = mysqli_query($con,"INSERT INTO table3(Id,Type,name,rows)VALUES('".$Id."','".$Type."','".$Name."','".$Name."".$i."')");
}

How can i insert last two variables in database with prepare statement like i do in simple query

iam using prepare statement here

$insert="INSERT INTO table3(Id,Type,name,rows)VALUES(?, ?, ?, ?)";
$stmt = $con->prepare($insert);

how can i pas variables here

$stmt->bind_param('ssss', $Id,$Type,$Name, $Name $i);
$stmt->execute();
Solution 
  • $insert="INSERT INTO table3(Id,Type,name,rows)VALUES(?, ?, ?, ?)";
$stmt = $con->prepare($insert);
$lastParam = $name.$i;
$stmt->bind_param('ssss', $Id,$Type,$Name, $lastParam);
$stmt->execute();