PDO Invalid parameter number: number of bound variables does not ma..

[ttocskcaj]

I'm new to using PDO and prepared statements. I have the following code:

            $db = MineCMS::get()->getDatabase();
            $stmt = $db->prepare("SELECT * FROM `` WHERE `?` = '?'");
            $result = $stmt->execute(array($db->prefix('servers'),$by,$value));
            $row = $result->fetch();

Where $db is an instance of PDO.

 

It returns the following error: SQLSTATE[HY093]: Invalid parameter number: number of bound variables does not match number of tokens

What am I doing wrong?

[xyph]

You should check out the examples in the manual.

 

For one, you've only defined 2 parameters, but attempt to use 3 in the execute method.

 

Another, you are trying to SELECT from... a table with an empty name?

 

Finally, you aren't supposed to have column/table names as parameters. It won't work properly. You shouldn't be defining those from insecure sources anyways.

[ttocskcaj]

Sorry, that was just a typo. It should read:

$stmt = $db->prepare("SELECT * FROM `?` WHERE `?` = '?'");

which still doesn't work.

 

Also the $by and $value get checked before that code.

[Jessica]

Finally, you aren't supposed to have column/table names as parameters. It won't work properly. You shouldn't be defining those from insecure sources anyways.