[SOLVED] PDO Prepared Statement - Strange Problem

[skepp]

Hello, I'm trying a simple SELECT statement with PDO (MySQL in the back) and stumbled onto a problem.

 

Here's my code:

// query
$q = "SELECT * FROM user WHERE username = :username AND password = :password";
$bindings = array(":username"=>"testuser", ":password"=>"here_comes_a_md5_hash");
$result = $DB->query($q, $bindings);
if($row = $result->fetch(PDO::FETCH_ASSOC)) {
   // do something
}

 

And in the database class I do a PDO->prepare() and some bindParams, execute() ect.

 

So..this works fine as long as I just use :username OR :password, but not with both in the query. I'm getting crazy here. If I change the query and i.e. hardcode the password = 'password-hash' OR the username = 'testuser' it works as it should and retrieves the data. But if I change the query back to the example above, it doesn't work. I get no error, just no result back. From the tests I know that both username and password are correct, so where is my error, if there is one?

 

anyone?

[skepp]

Oh btw. forgot to mention the mysql version:

mysql  Ver 14.12 Distrib 5.0.75

[skepp]

Ok, changed from bindParam() to bindValue() and now it works as it should...