mySqli使用通配符绑定参数LIKE

时间:2014-10-24 07:09:48

标签: php mysql stored-procedures mysqli prepared-statement

我遇到了将LIKE与Wildcard绑定到我在MySQLi中准备好的语句的问题。我尝试了以下两种方法,如图所示& concat。(用@fancyPants输入更新)

  • 有没有办法可以在绑定发生后查看我自己的SQL语句?

  • 如何正确绑定它以获得我想要的结果?

它没有LIKE语句。

我只能从使用某个搜索字词中提取数据。我的代码有什么问题吗?

$str = $_POST["searchstr"];


    if(isset($_POST['submit']))
    {
        $price=$_POST['price'];


        if(!empty($_POST['chkbx']))
        {
            foreach($_POST['chkbx'] as $selected)
            {


                $sql= 'SELECT bookTitle, bookPrice FROM nbc_book WHERE catID LIKE "%'.$selected.'%" AND bookTitle LIKE "%'.$str.'%" AND bookPrice < ?';
                $stmt=mysqli_prepare($con,$sql);
                mysqli_stmt_bind_param($stmt,"i",$price);
                mysqli_stmt_execute($stmt);
                mysqli_stmt_bind_result($stmt, $bookTitle, $bookPrice); 
                while ($stmt->fetch()) {
                     echo $bookTitle.$bookPrice."<br>";
                }
            }
        }
    }

1 个答案:

答案 0 :(得分:2)

$searchStr =  'oracle';
$sql= 'SELECT bookTitle, bookPrice FROM nbc_book WHERE catID LIKE ? AND bookTitle LIKE "%'.$searchStr.'%" AND bookPrice < ?';
$stmt=mysqli_prepare($con,$sql);
mysqli_stmt_bind_param($stmt,"ssi",$selected,$price);
mysqli_stmt_execute($stmt);
mysqli_stmt_bind_result($stmt, $bookTitle, $bookPrice); 
while ($stmt->fetch()) {
    echo $bookTitle;
}