Can someone please tell me what I'm doing wrong. I am trying to select everything from users and then I want to use the ['password'] and den ['verified'] strings from the database, where it says '//use your bound variables here'. I'm new to prepared statements trying to learn. Thanks
$read = $db->prepare('SELECT * FROM users WHERE email=? LIMIT 1');
$read->bind_param('s', $email);
$read->execute();
$read->store_result();
if($read->num_rows > 0){
$read->bind_result($*);
$read->fetch();
// use your bound variables here
$userpassword=$read['password'];
$userverified=$read['verified'];
$read->close();
} else {
// no results found
}
If you are only starting to learn PHP then you should learn PDO instead of mysqli. PDO is much easier and more suitable for beginners. Start here https://phpdelusions.net/pdo & https://websitebeaver.com/php-pdo-prepared-statements-to-prevent-sql-injection Don't waste your time with mysqli.
$pdo = new \PDO("mysql:host=localhost;dbname=test;charset=utf8mb4", 'inet', '5432', [
\PDO::ATTR_ERRMODE => \PDO::ERRMODE_EXCEPTION,
\PDO::ATTR_EMULATE_PREPARES => false
]);
$read = $pdo->prepare('SELECT * FROM users WHERE email=? LIMIT 1');
$read->execute([$email]);
$user = $read->fetch();
if ($user) {
$userpassword = $user['password'];
$userverified = $user['verified'];
} else {
// no results found
}
If you must use mysqli then you can use get_result()
to fetch mysqli_result
object from which you can then fetch an array or an object representing your data.
mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);
$db = new mysqli('localhost', 'user', 'password', 'test');
$db->set_charset('utf8mb4'); // always set the charset
$read = $db->prepare('SELECT * FROM users WHERE email=? LIMIT 1');
$read->bind_param('s', $email);
$read->execute();
$result = $read->get_result();
$user = $result->fetch_assoc();
if ($user) {
$userpassword = $user['password'];
$userverified = $user['verified'];
} else {
// no results found
}