警告：PDOStatement::execute() [pdostatement.execute]: SQLSTATE[HY093]: Invalid parameter number: parame

Posted 2023-04-13

【中文标题】警告：PDOStatement::execute() [pdostatement.execute]: SQLSTATE[HY093]: Invalid parameter number: parameter is not defined in

【英文标题】：Warning: PDOStatement::execute() [pdostatement.execute]: SQLSTATE[HY093]: Invalid parameter number: parameter was not defined in

【发布时间】：2018-05-31 05:12:12

【问题描述】：

代码如下：

<?php 
    class User 
         protected $pdo;enter code here

         function __construct($pdo)
            $this->pdo = $pdo;
         
    public function checkInput($var)
           $var = htmlspecialchars($var);
           $var = trim($var);
           $var = stripcslashes($var);
           return $var;
    

    public function login($email,$password)
        $stmt = $this->pdo->prepare("SELECT 'user_id' FROM 'users' WHERE 'email' = :email AND 'password' = :password");
        $stmt->bindParam(":user_id", $user_id, PDO::PARAM_STR);
        $stmt->bindParam(":password", $password, PDO::PARAM_STR);
        $stmt->execute();

        $user = $stmt->fetch(PDO::FETCH_OBJ);
        $count = $stmt->rowCount();

        if($count > 0)
            $_SESSION['user_id'] = $user->user_id;
            header('Location: home.php');
        else
            return false;
        
        
    
?>

【参考方案1】：

您的查询中有语法错误，并且您试图传递错误的参数。您的$user_id 在哪里，所以它应该是$email，因为您正在接收$email 和$password

改变

$stmt->bindParam(":user_id", $user_id, PDO::PARAM_STR);

有

$stmt->bindParam(":email", $email, PDO::PARAM_STR);

改变

$stmt = $this->pdo->prepare("SELECT 'user_id' FROM 'users' WHERE 'email' = :email AND 'password' = :password");

有

$stmt = $this->pdo->prepare("SELECT user_id FROM users WHERE email = :email AND password = :password");