mysqli_stmt_prepare

Prepare a SQL statement for execution (PHP 5)
bool mysqli_stmt_prepare ( mysqli_stmt stmt, string query )

Example 1574. Object oriented style

copy to clipboard

<?php

$mysqli = new mysqli("localhost", "my_user", "my_password", "world");

/* check connection */
if (mysqli_connect_errno()) {

    printf("Connect failed: %s\n", mysqli_connect_error());

    exit();

}

$city = "Amersfoort";

/* create a prepared statement */
$stmt =  $mysqli->stmt_init();

if ($stmt->prepare("SELECT District FROM City WHERE Name=?")) {


    /* bind parameters for markers */

    $stmt->bind_param("s", $city);


    /* execute query */

    $stmt->execute();


    /* bind result variables */

    $stmt->bind_result($district);


    /* fetch value */

    $stmt->fetch();


    printf("%s is in district %s\n", $city, $district);


    /* close statement */

    $stmt->close();

}

/* close connection */
$mysqli->close();
?>

Example 1575. Procedural style

copy to clipboard

<?php

$link = mysqli_connect("localhost", "my_user", "my_password", "world");

/* check connection */
if (mysqli_connect_errno()) {

    printf("Connect failed: %s\n", mysqli_connect_error());

    exit();

}

$city = "Amersfoort";

/* create a prepared statement */
$stmt = mysqli_stmt_init($link);

if (mysqli_stmt_prepare($stmt, 'SELECT District FROM City WHERE Name=?')) {


    /* bind parameters for markers */

    mysqli_stmt_bind_param($stmt, "s", $city);


    /* execute query */

    mysqli_stmt_execute($stmt);


    /* bind result variables */

    mysqli_stmt_bind_result($stmt, $district);


    /* fetch value */

    mysqli_stmt_fetch($stmt);


    printf("%s is in district %s\n", $city, $district);


    /* close statement */

    mysqli_stmt_close($stmt);

}

/* close connection */
mysqli_close($link);
?>

Code Examples / Notes » mysqli_stmt_prepare

st dot john dot johnson

In reference to what lachlan76 said before, stored procedures CAN be executed through prepared statements as long as you tell the DB to move to the next result before executing again. Example (Five calls to a stored procedure): <?php for ($i=0;$i<5;$i++) { $statement = $mysqli->stmt_init(); $statement->prepare("CALL some_procedure( ? )"); // Bind, execute, and bind. $statement->bind_param("i", 1); $statement->execute(); $statement->bind_result($results); while($statement->fetch()) { // Do what you want with your results. } $statement->close(); // Now move the mysqli connection to a new result. while($mysqli->next_result()) { } } ?> If you include the last statement, this code should execute without the nasty "Commands out of sync" error.

andrey

If you select LOBs use the following order of execution or you risk mysqli allocating more memory that actually used 1)prepare() 2)execute() 3)store_result() 4)bind_result() If you skip 3) or exchange 3) and 4) then mysqli will allocate memory for the maximal length of the column which is 255 for tinyblob, 64k for blob(still ok), 16MByte for MEDIUMBLOB - quite a lot and 4G for LONGBLOB (good if you have so much memory). Queries which use this order a bit slower when there is a LOB but this is the price of not having memory exhaustion in seconds.

lachlan76

Do not try to use a stored procedure through a prepared statement. Example: <?php $statement = $mysqli->stmt_init(); $statement->prepare("CALL some_procedure()"); ?> If you attempt to do this, it will fail by dropping the connection during the next query. Use mysqli_multi_query instead. Example: <?php $mysqli->multi_query("CALL some_procedure()"); do { $result = $mysqli->store_result(); // Do your processing work here $result->free(); } while($mysqli->next_result()); ?> This means that you cannot bind parameters or results, however.

Change Language

mysqli_affected_rows
mysqli_autocommit
mysqli_bind_param
mysqli_bind_result
mysqli_change_user
mysqli_character_set_name
mysqli_client_encoding
mysqli_close
mysqli_commit
mysqli_connect_errno
mysqli_connect_error
mysqli_connect
mysqli_data_seek
mysqli_debug
mysqli_disable_reads_from_master
mysqli_disable_rpl_parse
mysqli_dump_debug_info
mysqli_embedded_server_end
mysqli_embedded_server_start
mysqli_enable_reads_from_master
mysqli_enable_rpl_parse
mysqli_errno
mysqli_error
mysqli_escape_string
mysqli_execute
mysqli_fetch_array
mysqli_fetch_assoc
mysqli_fetch_field_direct
mysqli_fetch_field
mysqli_fetch_fields
mysqli_fetch_lengths
mysqli_fetch_object
mysqli_fetch_row
mysqli_fetch
mysqli_field_count
mysqli_field_seek
mysqli_field_tell
mysqli_free_result
mysqli_get_charset
mysqli_get_client_info
mysqli_get_client_version
mysqli_get_host_info
mysqli_get_metadata
mysqli_get_proto_info
mysqli_get_server_info
mysqli_get_server_version
mysqli_get_warnings
mysqli_info
mysqli_init
mysqli_insert_id
mysqli_kill
mysqli_master_query
mysqli_more_results
mysqli_multi_query
mysqli_next_result
mysqli_num_fields
mysqli_num_rows
mysqli_options
mysqli_param_count
mysqli_ping
mysqli_prepare
mysqli_query
mysqli_real_connect
mysqli_real_escape_string
mysqli_real_query
mysqli_report
mysqli_rollback
mysqli_rpl_parse_enabled
mysqli_rpl_probe
mysqli_rpl_query_type
mysqli_select_db
mysqli_send_long_data
mysqli_send_query
mysqli_server_end
mysqli_server_init
mysqli_set_charset
mysqli_set_local_infile_default
mysqli_set_local_infile_handler
mysqli_set_opt
mysqli_slave_query
mysqli_sqlstate
mysqli_ssl_set
mysqli_stat
mysqli_stmt_affected_rows
mysqli_stmt_attr_get
mysqli_stmt_attr_set
mysqli_stmt_bind_param
mysqli_stmt_bind_result
mysqli_stmt_close
mysqli_stmt_data_seek
mysqli_stmt_errno
mysqli_stmt_error
mysqli_stmt_execute
mysqli_stmt_fetch
mysqli_stmt_field_count
mysqli_stmt_free_result
mysqli_stmt_get_warnings
mysqli_stmt_init
mysqli_stmt_insert_id
mysqli_stmt_num_rows
mysqli_stmt_param_count
mysqli_stmt_prepare
mysqli_stmt_reset
mysqli_stmt_result_metadata
mysqli_stmt_send_long_data
mysqli_stmt_sqlstate
mysqli_stmt_store_result
mysqli_store_result
mysqli_thread_id
mysqli_thread_safe
mysqli_use_result
mysqli_warning_count