PHP Prepared Statements in MySQL

Prepared Statements is also known as parameterized statement. It passes the query that contains placeholders (?) to the MySQL Server.

Example

  <?php
$servername = "localhost";
$username = "root";
$password = "";
$dbname = "portal";

// Create connection
$conn = new mysqli($servername, $username, $password, $dbname);

// Check connection
if ($conn->connect_error) {
  die("Connection failed: " . $conn->connect_error);
}

// prepare and bind

$stmt =$conn->prepare("INSERT INTO student (firstname, lastname, email) VALUES (?, ?, ?)");
$stmt->bind_param("sss", $firstname, $lastname, $email);

// set parameters and execute
$firstname = "John";
$lastname = "Doe";
$email = "john@example.com";
$stmt->execute();

$firstname = "Mary";
$lastname = "Moe";
$email = "mary@example.com";
$stmt->execute();

$firstname = "Julie";
$lastname = "Dooley";
$email = "julie@example.com";
$stmt->execute();

echo "New records created successfully";

$stmt->close();
$conn->close();
?>

Output:-

    New records created successfully

See in Fig..

Next Topic

← prev next →

MYSQL Database

PHP Programs

PHP Projects

PHP Prepared Statements in MySQL