PHP - Warning: Mysqli_stmt::bind_param() [mysqli-stmt.bind-param]

<form id="form" name="form" method="post" action="Website2.php">
  <p>
    <label for="Genre">Genre</label>
    <input type="text" name="Genre" id="Genre" />
  </p>
  <p>
    <label for="Naam">Naam</label>
    <input type="text" name="Naam" id="Naam" />
  </p>
  <p>
    <label for="Jaar">Jaar</label>
    <input type="text" name="Jaar" id="Jaar" />
  </p>
  <p>
    <label for="Regisseur">Regisseur</label>
    <input type="text" name="Regisseur" id="Regisseur" />
  </p>
  <p>
    <input type="submit" name="Verzenden" id="Verzenden" value="Verzenden" />
  </p>
</form>
<?php
	$Genre = $_POST["Genre"];
	$Naam = $_POST["Naam"];
	$Jaar = $_POST["Jaar"];
	$Regisseur = $_POST["Regisseur"];
		/*Hier hoeft geen verbinden meer gemaakt te worden met de database*/
				if (isset($_POST['Verzenden']) && trim($_POST['Verzenden'])!=''){
                                $sql = "INSERT INTO 
				Movies (Genre, Naam, Jaar, Regisseur)
				VALUES ('$Genre', '$Naam', '$Jaar', '$Regisseur')";
					$resultaat = mysqli_query($db, $sql);
					$verbreken = mysqli_close($db);
					echo "De gegevens van $Naam zijn opgeslagen in de database.";}
                                else echo 'Hier kunt u iets toevoegen';
?>

Php Whizzs!

Here is my login.php partial relevant to the case code:

	$query_1 = "SELECT id,recruits_number,sponsor_username,account_activation_status,id_video_verification_status,id_verification_video_file_url,username,password,primary_domain,primary_website_email,registering_country,registering_ip,registering_browser,registering_os,registering_isp,age_range FROM users WHERE $querying_column = ?"; 
    $stmt_1 = mysqli_prepare($conn,$query_1); 
    mysqli_stmt_bind_param($stmt_1,'s',$login_username_or_email_or_domain); 
    mysqli_stmt_execute($stmt_1); 
    //Check if User's details was successfully extracted or not from 'users' tbl. 
    if (!$stmt_1) 
    { 
        echo "ERROR 1: Sorry! Our system is currently experiencing a problem logging you in!"; 
        exit(); 
    } 
    else 
    { 
        $result_1 = mysqli_stmt_bind_result($stmt_1,$db_id,$db_recruits_number,$db_sponsor_username,$db_account_activation_status,$db_id_video_verification_status,$db_id_verification_video_file_url,$db_username,$db_password,$db_primary_domain,$db_website_email,$db_registering_country,$registering_ip,$registering_browser,$registering_os,$registering_isp,$db_age_range); 
        mysqli_stmt_fetch($stmt_1); 
        mysqli_stmt_close($stmt_1); 
        //Free Result_1 Set 
        mysqli_stmt_free_result($stmt_1); 
	

I can login to user account with accurate password. Good!

With wrong password, supposed to get error:

"Incorrect log-in details".

Instead get this:

"Warning: mysqli_stmt_free_result(): Couldn't fetch mysqli_stmt in C:\xampp\htdocs\test\login_v1.php on line 58
Incorrect log-in details".

Line 58 is the last one:

	$result_1 = mysqli_stmt_bind_result($stmt_1,$db_id,$db_recruits_number,$db_sponsor_username,$db_account_activation_status,$db_id_video_verification_status,$db_id_verification_video_file_url,$db_username,$db_password,$db_primary_domain,$db_website_email,$db_registering_country,$registering_ip,$registering_browser,$registering_os,$registering_isp,$db_age_range); 
        mysqli_stmt_fetch($stmt_1); 
        mysqli_stmt_close($stmt_1); 
        //Free Result_1 Set 
        mysqli_stmt_free_result($stmt_1); 
	

I read that you use "mysqli_stmt_free_result($stmt)" if you use mysqli_stmt_store_result($stmt). Is this causing the error ? Should I remove mysqli_stmt_free_result($stmt) ?

Or, instead of this:

	        mysqli_stmt_close($stmt_1); 
        //Free Result_1 Set 
        mysqli_stmt_free_result($stmt_1); 
	

Should I do this:

	        //Free Result_1 Set 
        mysqli_stmt_free_result($stmt_1); 
	        mysqli_stmt_close($stmt_1);         
	

Or, maybe I should add another line ? If so, then what and where ?

Already checked the manual and stuck!

How-about a sample code from your end ?

while($row=mysql_fetch_array($query))
{
$dis1 = "SELECT auth_id, auth_min, auth_max, required FROM sales_authorisation";
$dis2 = mysql_query($dis1) or die (mysql_error());

while($d1 = mysql_fetch_array($dis2))
{
	$min = $d1['auth_min'];
	$max = $d1['auth_max'];
	$req = $d1['required'];
	//echo $req;
	
if( ($min <= ($row['discount'])) && ($max >= ($row['discount'])) && ($req='Yes'))
{
$auth = "UPDATE orders SET authorise='No' WHERE order_id=".$order_id."";
echo "hello";
}
else
{

$auth = "UPDATE orders SET authorise='Yes' WHERE order_id=".$order_id."";

}
$auth1 = mysql_query($auth) or die (mysql_error());

}

?> 

<tr> 
<td><?php echo $counter++; ?></td>
<td><?php echo $row['itemname']; ?> - <?php echo $row['uom']; ?></td>
<td><?php echo $row['description']; ?></td>
<td><?php echo $row['quantity']; ?></td>
<td><?php echo number_format($row['selling_price'],2); ?></td>
<td><?php echo $row['discount']; ?> %</td>
<td><?php echo $row['tname']; ?>-<?php echo $row['rate']; ?> %</td>
<td><?php echo $row['freight']; ?></td>
<td><?php echo number_format($row['total'],2); ?></td>
 
 </tr> 

Hi,

I have two scripts using almost identical code.
One of them works and finds the field (email) - the PRIMARY KEY (email)
and the other doesn't (user_key) - not indexed

Is this because PHP 7 needs to use only indexes in the WHERE part of SQL Query?

Here are the two scripts - first one works

$sql = 'SELECT access,fname FROM clients WHERE email=?';

	    $stmt = $connect->prepare($sql);

	    $stmt->execute([$email]); 

	    $data_exists = ($stmt->fetchColumn() > 0) ? true : false;

	    if ($data_exists) { //   account found.

	        $row = $stmt->fetch();

	        $access = $row['access'];

	        $fname = $row['fname'];

	        }

	    else {

	        $err_msg = 'Invalid Email Address and/or Password.';

	        $email = '';

	        $pass = '';

	        require_once ("login_fm.php");

	        exit;

	        }

	[/PHP]

This second one drops through to the ERROR page.

$sql = 'SELECT email,fname,lname,confirm FROM clients WHERE user_key=?';
    $stmt = $connect->prepare($sql);
    $stmt->execute([$the_key]); 
    $data_exists = ($stmt->fetchColumn() > 0) ? true : false;
    if ($data_exists) { //   Account found.
        $row = $stmt->fetch();
        $email        = $row['email'];
        $name         = $row['fname'].' '.$row['lname'];
        $confirm     = $row['confirm'];
        
        $_SESSION['auth'] = "yes";
        $_SESSION['email'] = $email;
        $_SESSION['name'] = $name;
        
        $sql = 'UPDATE clients SET confirm = ?,log_count = log_count+1,last_date=? WHERE email=?';
        $stmt= $connect->prepare($sql);
        $stmt->execute(['y',$today_time,$email]);
     
        require_once("index.php");   //  SUCCESSFUL LOGIN: THIS LOADS THE START PAGE  
        exit;    
        }  // end if
    else {
        $err_page_message = "ERROR - Account not found $the_key : $name";
        require_once("err.php"); 
        exit;
        }  // end else  

May be it's a different reason - like I'm too tied !

On the second one. I could rewrite it to just try the update and fail-over to the ERROR page,

But it would be nice to know why it isn't working.

It's quite simple, I just want to check to see if a row exists with the condition given, that's all.

I never had this problem the old mysql but the PDO seems a bit tricky or I'm just using the wrong code lol.

Thanks

Call to a member function bind_param() on a non-object in /models/class.newuser.php on line 131

$stmt->bind_param("ssssi", $this->username, $secure_pass, $this->clean_email, $this->activation_token, $this->user_active);
$stmt->execute();
$inserted_id = $mysqli->insert_id;$stmt->close();
//Insert default permission into matches table
$stmt = $mysqli->prepare("INSERT INTO ".$db_table_prefix."user_permission_matches (
user_id,
permission_id
)
VALUES (
?,
'1'
)") ;


$stmt->bind_param("s", $inserted_id);
$stmt->execute();
$stmt->close();

<?php
/*
.
.
*/


class User 
{
	public $user_active = 0;
	private $clean_email;
	public $status = false;
	private $clean_password;
	private $username;
	public $sql_failure = false;
	public $mail_failure = false;
	public $email_taken = false;
	public $username_taken = false;
	public $activation_token = 0;
	public $success = NULL;
	
	function __construct($user,$pass,$email)
	{

		//Sanitize
		$this->clean_email = sanitize($email);
		$this->clean_password = trim($pass);
		$this->username = sanitize($user);
		
		if(usernameExists($this->username))
		{
			$this->username_taken = true;
		}
		else if(emailExists($this->clean_email))
		{
			$this->email_taken = true;
		}
		else
		{
			//No problems have been found.
			$this->status = true;
		}
	}
	
	public function userCakeAddUser()
	{
		global $mysqli,$emailActivation,$websiteUrl,$db_table_prefix;
		
		//Prevent this function being called if there were construction errors
		if($this->status)
		{
			//Construct a secure hash for the plain text password
			$secure_pass = generateHash($this->clean_password);
			
			//Construct a unique activation token
			$this->activation_token = generateActivationToken();
			
			//Do we need to send out an activation email?
			if($emailActivation == "true")
			{
				//User must activate their account first
				$this->user_active = 0;
				
				$mail = new userCakeMail();
				
				//Build the activation message
				$activation_message = lang("ACCOUNT_ACTIVATION_MESSAGE",array($websiteUrl,$this->activation_token));
				
				//Define more if you want to build larger structures
				$hooks = array(
					"searchStrs" => array("#ACTIVATION-MESSAGE","#ACTIVATION-KEY","#USERNAME#"),
					"subjectStrs" => array($activation_message,$this->activation_token,$this->username)
					);
				
				/* Build the template - Optional, you can just use the sendMail function 
				Instead to pass a message. */
				
				if(!$mail->newTemplateMsg("new-registration.txt",$hooks))
				{
					$this->mail_failure = true;
				}
				else
				{
					//Send the mail. Specify users email here and subject. 
					//SendMail can have a third parementer for message if you do not wish to build a template.
					
					if(!$mail->sendMail($this->clean_email,"New User"))
					{
						$this->mail_failure = true;
					}
				}
				$this->success = lang("ACCOUNT_REGISTRATION_COMPLETE_TYPE2");
			}
			else
			{
				//Instant account activation
				$this->user_active = 1;
				$this->success = lang("ACCOUNT_REGISTRATION_COMPLETE_TYPE1");
			}	
			
			
			if(!$this->mail_failure)
			{
				//Insert the user into the database providing no errors have been found.
				$stmt = $mysqli->prepare("INSERT INTO ".$db_table_prefix."users (
					user_name,
					password,
					email,
					activation_token,
					last_activation_request,
					lost_password_request, 
					active,
					title,
					sign_up_stamp,
					last_sign_in_stamp
					)
					VALUES (
					?,
					?,
					?,
					?,
					?,
					'".time()."',
					'0',
					?,
					'New Member',
					'".time()."',
					'0'
					)");
				
				$stmt->bind_param("ssssi", $this->username, $secure_pass, $this->clean_email, $this->activation_token, $this->user_active);
				$stmt->execute();
				$inserted_id = $mysqli->insert_id;
				$stmt->close();
				
				//Insert default permission into matches table
				$stmt = $mysqli->prepare("INSERT INTO ".$db_table_prefix."user_permission_matches  (
					user_id,
					permission_id
					)
					VALUES (
					?,
					'1'
					)") ;
					
					
				$stmt->bind_param("s", $inserted_id);
				$stmt->execute();
				$stmt->close();
			}
		}
	}
}

?>

$result = display_all(fcon, $var1, $var2);

function display_all( // defined in another file
$query = "SELECT one, two, three four, index1, index2 FROM numbers WHERE index1 = $var1 LIMIT 0, 1"; $result = mysqli_query($fcon, $query); return ($result); )

		while ($row = mysqli_fetch_array($result, MYSQLI_ASSOC))
		{
			echo "<tr>";
			echo "<td>".$one."</td>";
			echo "<td>".$two."</td>";
			echo "<td>".$three. "</td>";
			echo "<td>".$four. "</td>";
			echo "<td>".$index1. "</td>"; 
                        echo "</tr>";
               }    

function display_all{

      $query = "SELECT one, two, three four, index1 FROM numbers WHERE index1 = ?
                LIMIT 0, 10";
      $stmt = $conn->prepare($query);
      $stmt->bind_param('i',$var)
      if($stmt->execute())
      {
          $stmt->bind_result($one, $two, $three, $four, $index1);
          $stmt->store_result();
      }
return($stmt);
}

I'm new to coding and prepared statements.

I'm getting:
"Fatal error: Call to a member function bind_param() on a non-object in /home/content/01/3251001/html/Manage-Users/acc-files/updateRecord.php on line 17"

For this:

 <?php

include "db_connect.php"; 

if(isset($_POST['UserID'])){
	
	$stmt = $con -> prepare('UPDATE UserList 
		SET Status = ?,
			FirstName = ?,
			LastName = ?,
			Username = ?,
			Email = ?,
			Department = ?,
			Manager = ?,
		WHERE UserID = ?');

	$stmt -> bind_param('isssssss', /* Line 17 */
		$_POST['Status'],
		$_POST['FirstName'],
		$_POST['LastName'],
		$_POST['Username'],
		$_POST['Email'],
		$_POST['Department'],
		$_POST['Manager'],
		$_POST['UserID']);
	
	$stmt->execute();
}

Thank you in advance for helping.

2 9 0 1

Fatal error: Call to a member function bind_param() on boolean.

It fails on the BIND_PARAM line.

I have looked at this all day, struggling with Mysqli as my normal MySql works fine with assoc and fetch.

I have verified in PhpInfo that mysqli is enabled.

I have verified its loaded using <?php print_r(get_loaded_extensions());

Added utf8 just to make sure. 

If I manually use the Wrong Password, I get a connection refused error, so I know its connected.

Verified my $_POST variables are there using Print in the 2 9 0 1 above.

All Table and Field Names are correct.  Manual Insert works fine in myPhpAdmin.

Tried Field Names and ? marks with and without single quotes.

All fields are Integers in the table.

Could it be related to an Auto_Increment Field in the table for a record ID that I am not providing??

A normal insert in myPhpAdmin doesn't need it.

        $QuestionID = $_POST['qID'];
        $PlayerID = $_POST['pID'];        
        $Answer = $_POST['ans'];
        $Option = $_POST['opt'];
        

        print $QuestionID . " ";
        print $PlayerID . " ";
        print $Answer . " ";
        print $Option . " ";

        $database = "Survey";

        $db_found = new mysqli('localhost', 'survey', 'survey', $database);
        $db_found->set_charset("utf8");
        
        if (!$db_found) {
            echo "Error: db connection = false";
        }
        else {
            $SQL_INSERT = "INSERT INTO 'Answers' ('QuestionID', 'PlayerID', 'Answer', 'Option') VALUES (?,?,?,?)";
            $stmt = $db_found->prepare($SQL_INSERT);
            $stmt->bind_param('iiii', $QuestionID, $PlayerID, $Answer, $Option);
            $stmt->execute();
        }

Thanks,

CadJoe

+-------+------------+------------+------------+------------+---------------+
|  id   |    Naam    |  Metgesel  |   Kind1    |   Kind2    |     Email     |
+-------+------------+------------+------------+------------+---------------+
| abc12 |   Bobby    |   Caily    |      *     |     *      | b@example.com |
|  ...  |    ...     |    ...     |     ...    |    ...     |      ...      |
+-------+------------+------------+------------+------------+---------------+

Warning: mysql_real_escape_string() expects parameter 1 to be string, array given in /home/.../public_html/wp-content/plugins/insert-php-code-snippet/shortcode-handler.php(32) : eval()'d code on line 4 Invalid or no security key!

<script>
function invite(){
document.getElementById('invite').style.display=(document.getElementById('invite').style.display=='block')?'none':'block'; 
}
</script>

<script>
function returnHome(){
setTimeout(function () {window.location.href = 'http://example.com';},2000); 
}
</script>

$part = $_REQUEST['id'];

if(isset($_GET["id"])){
    $query = sprintf("SELECT * FROM `DATABASE`.`TABLE`
       WHERE idquack='$part'",
       mysql_real_escape_string($query));

    $result = mysql_query($query);
    if (!$result) {
        $message = 'Invalid or no security key!';
        die($message);
    } else {
        while ($row = mysql_fetch_assoc($result)) {
            if ($row['Metgesel'] != "*"){
                if ($row['Metgesel'] == "#"){
                    if ($row['Kind1'] != "*"){
                        if ($row['Kind2'] != "*"){
                            echo '<h1>' . $row['Naam'] . ", " . "Metgesel" . ", " . $row['Kind1'] . " en " . $row['Kind2'] . "</h1>";
                        } else {
                            echo '<h1>' . $row['Naam'] . ", " . "Metgesel" . " en " . $row['Kind1'] . "</h1>";
                        }
                    } else {
                         echo '<h1>' . $row['Naam'] . " en " . "Metgesel" . "</h1>";
                    }
                } else{
                    if ($row['Kind1'] != "*"){
                        if ($row['Kind2'] != "*"){
                            echo '<h1>' . $row['Naam'] . ", " . $row['Metgesel'] . ", " . $row['Kind1'] . " en " . $row['Kind2'] . "</h1>";
                        } else {
                            echo '<h1>' . $row['Naam'] . ", " . $row['Metgesel'] . " en " . $row['Kind1'] . "</h1>";
                        }
                    } else {
                        echo '<h1>' . $row['Naam'] . " en " . $row['Metgesel'] . "</h1>";
                    }
                }
            } else {
                echo '<h1>' . $row['Naam'] . "</h1>";
            }

            echo '<script>invite();</script>';
        }
    }

    mysql_free_result($result);
} else{
    echo 'Hold on tight - we're taking you to safety!';
    echo '<script>returnHome();</script>';
}

Hi Everyone

I am having a few issues with my website. I have developed in on my xampp local host and it works ok but when I upload the files and try to renew a membership using stripe I get the following messages.

Warning: session_start(): Cannot start session when headers already sent in /customers/a/d/f/mywebsite.co.uk/httpd.www/mywebsite/inc/settings.php on line 2 

Warning: Cannot modify header information - headers already sent by (output started at /customers/a/d/f/mywebsite.co.uk/httpd.www/mywebsite/procedures/payments/charge.php:1) in /customers/a/d/f/mywebsite.co.uk/httpd.www/mywebsite/procedures/payments/charge.php on line 141

I have some includes that appear on every page. This is the bootstrap.php file. This file holds the settings.php which connects to my database and other function files.

In this settings page I call the session_start() php function and then connect to my database.

I call the bootstrap.php file on every page to there for call the session_start() on every page.

I am using sessions alot so is this the right thing to do?

I have attached the renew_membership payment page which holds the form. The user fills out the payment page and the form data gets sent to a script called charge.php which uses the stripe objects to make the payment. I then want to do a redirect to the paymentSuccess.php page to output to the user that the payment was made successfully. This is where the issues arrise. I have split the charge file into 3 screen shots so it is more readable.

Hope someone can help me.

Thanks a lot

David