PDO混合未命名和命名参数-PDOmixingunnamedandnamedparameters

1  

Unnamed parameters can have int values. Just define explicit type in bind function.

未命名的参数可以具有int值。只需在bind函数中定义显式类型即可。

There can be problem with variables data type. It is good to use intval()function before.

变量数据类型可能存在问题。之前使用intval()函数是很好的。

Your solution in unnamed data type can look like this:

您的未命名数据类型的解决方案可能如下所示:

$counter = 0;

//build prepared statement

$query = $database->prepare('SELECT something FROM something WHERE 0 OR '.
implode(' OR ', array_fill(0 , $searchArrayCount, 'name LIKE ?')).
        ' LIMIT ?, ?');

// bind parameters
foreach($searchArray as $value)
{
    $counter++;
    $query->bindValue($counter, ('%'.$value.'%'), PDO::PARAM_STR);
}

$query->bindValue(($counter+1), ($page*$perPage), PDO::PARAM_INT);
$query->bindParam(($counter+2), $perPage, PDO::PARAM_INT);

Note I used rather bindValue() before bindParam(). And beware from the first parameter of LIMIT. If the count will be here then the selection will be start on the end of the data and no rows will be returned.

注意我在bindParam()之前使用了bindValue()。请注意LIMIT的第一个参数。如果计数将在此处,则选择将从数据末尾开始,并且不返回任何行。

0  

Faced to a similar problem, in the end I just skipped bind parameters in the LIMIT clause:

面对类似的问题,最后我在LIMIT子句中跳过了绑定参数:

sprintf('LIMIT %d, %d', $offset, $size);

Another workaround (if your system supports it) is to switch to native parameter binding. Apparently, it's the emulation layer the one that exhibits this behaviour:

另一种解决方法(如果您的系统支持它)是切换到本机参数绑定。显然,它是表现出这种行为的仿真层:

$database->setAttribute(PDO::ATTR_EMULATE_PREPARES, FALSE);