Prepared Statement Insert Problem

Hello everyone, I have a problem.

I use the following to *try* and insert data into my MySQL database...

//Variables come from a form
$username= $_POST['username'];
$password = $_POST['password'];
$email = $_POST['email'];


//Connect to the database
$connect = mysqli_connect("$hostname", "$dbusername", "$dbpassword",
"$database")or die("cannot connect");


//Find out how many rows in the database
$aidcount = mysqli_query ($connect, "SELECT * FROM administrator");
$numrows = mysqli_num_rows($aidcount);


//The next 3 lines are using prepared statements to insert data but the
//second line ...mysqli_stmt_bind_param.. results in this error...
//Fatal error: Only variables can be passed by reference in file.php line 46

$submitadmin = mysqli_prepare($connect2, "INSERT INTO administrator VALUES
(?, ?, ?, ?)");

mysqli_stmt_bind_param($submitadmin, "isss", '$numrows', '$admin',
sha1('$password'), '$email');

mysqli_stmt_execute($submitadmin);

....anyone know how I can solve this problem so I can insert data into my
database with prepared statements?


--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: Prepared Statement Insert Problem

--0016e6470cc46f3403046f347889
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Remove the quotes around the variables in all your statements.
For example, this statement:
mysqli_stmt_bind_param($submitadmin, "isss", '$numrows', '$admin',
sha1('$password'), '$email');

could be rewritten as:
mysqli_stmt_bind_param($submitadmin, "isss", $numrows, $admin,
sha1($password), $email);

On Tue, Jul 21, 2009 at 8:01 PM, Jason Carson wrote:

> Hello everyone, I have a problem.
>
> I use the following to *try* and insert data into my MySQL database...
>
> //Variables come from a form
> $username= $_POST['username'];
> $password = $_POST['password'];
> $email = $_POST['email'];
>
>
> //Connect to the database
> $connect = mysqli_connect("$hostname", "$dbusername", "$dbpassword",
> "$database")or die("cannot connect");
>
>
> //Find out how many rows in the database
> $aidcount = mysqli_query ($connect, "SELECT * FROM administrator");
> $numrows = mysqli_num_rows($aidcount);
>
>
> //The next 3 lines are using prepared statements to insert data but the
> //second line ...mysqli_stmt_bind_param.. results in this error...
> //Fatal error: Only variables can be passed by reference in file.php line
> 46
>
> $submitadmin = mysqli_prepare($connect2, "INSERT INTO administrator VALUES
> (?, ?, ?, ?)");
>
> mysqli_stmt_bind_param($submitadmin, "isss", '$numrows', '$admin',
> sha1('$password'), '$email');
>
> mysqli_stmt_execute($submitadmin);
>
> ...anyone know how I can solve this problem so I can insert data into my
> database with prepared statements?
>
>
> --
> PHP Database Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>

--0016e6470cc46f3403046f347889--

Re: Prepared Statement Insert Problem

That worked, thanks!

> Remove the quotes around the variables in all your statements.
> For example, this statement:
> mysqli_stmt_bind_param($submitadmin, "isss", '$numrows', '$admin',
> sha1('$password'), '$email');
>
> could be rewritten as:
> mysqli_stmt_bind_param($submitadmin, "isss", $numrows, $admin,
> sha1($password), $email);
>
> On Tue, Jul 21, 2009 at 8:01 PM, Jason Carson
> wrote:
>
>> Hello everyone, I have a problem.
>>
>> I use the following to *try* and insert data into my MySQL database...
>>
>> //Variables come from a form
>> $username= $_POST['username'];
>> $password = $_POST['password'];
>> $email = $_POST['email'];
>>
>>
>> //Connect to the database
>> $connect = mysqli_connect("$hostname", "$dbusername", "$dbpassword",
>> "$database")or die("cannot connect");
>>
>>
>> //Find out how many rows in the database
>> $aidcount = mysqli_query ($connect, "SELECT * FROM administrator");
>> $numrows = mysqli_num_rows($aidcount);
>>
>>
>> //The next 3 lines are using prepared statements to insert data but the
>> //second line ...mysqli_stmt_bind_param.. results in this error...
>> //Fatal error: Only variables can be passed by reference in file.php
>> line
>> 46
>>
>> $submitadmin = mysqli_prepare($connect2, "INSERT INTO administrator
>> VALUES
>> (?, ?, ?, ?)");
>>
>> mysqli_stmt_bind_param($submitadmin, "isss", '$numrows', '$admin',
>> sha1('$password'), '$email');
>>
>> mysqli_stmt_execute($submitadmin);
>>
>> ...anyone know how I can solve this problem so I can insert data into my
>> database with prepared statements?
>>
>>
>> --
>> PHP Database Mailing List (http://www.php.net/)
>> To unsubscribe, visit: http://www.php.net/unsub.php
>>
>>
>



--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: Prepared Statement Insert Problem

kesavan trichy rengarajan wrote:

> could be rewritten as:
> mysqli_stmt_bind_param($submitadmin, "isss", $numrows, $admin,
> sha1($password), $email);

Turning on E_STRICT in PHP 5.3 will show

PHP Strict Standards: Only variables should be passed by reference

This is also true in earlier versions although the warning isn't
displayed.

For compliance, try:

$s = sha1($password);
mysqli_stmt_bind_param($submitadmin, "isss", $numrows, $admin, $s, $email);

Chris

--
Blog: http://blogs.oracle.com/opal
Twitter: http://twitter.com/ghrd

--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: Prepared Statement Insert Problem

Done. Thanks for letting me know about that.


> kesavan trichy rengarajan wrote:
>
> > could be rewritten as:
> > mysqli_stmt_bind_param($submitadmin, "isss", $numrows, $admin,
> > sha1($password), $email);
>
> Turning on E_STRICT in PHP 5.3 will show
>
> PHP Strict Standards: Only variables should be passed by reference
>
> This is also true in earlier versions although the warning isn't
> displayed.
>
> For compliance, try:
>
> $s = sha1($password);
> mysqli_stmt_bind_param($submitadmin, "isss", $numrows, $admin, $s,
> $email);
>
> Chris
>
> --
> Blog: http://blogs.oracle.com/opal
> Twitter: http://twitter.com/ghrd
>
> --
> PHP Database Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>



--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Re: Prepared Statement Insert Problem

--00163649a8b71d9551046f432316
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Hi i wanna ask a question. I am trying to create an image on fly, please do
help me , following is the code.

*File Name : Font.php
Code: *

Text
Text
onClick="showPic()">
/>