mysqli prepared statement mysqli_fetch_array()

[aHMAD_SQaLli]

Hello every one

so, I've been using mysql for almost 2years and I've heard that using MySQLi is more secure and I m still new in the prepared statement thing that's why I was wandering how to do this prepared statement with arrays ??

in an example I have this code, how can I execute it with prepared statement ?

$sql = mysqli_query($con, "SELECT users.regdate, topics.topic_body FROM `users` LEFT JOIN topics ON topics.topic_author = users.id WHERE topics.id=1 order by topic_edit_time ASC");
if( mysqli_num_rows($sql)>0 ) {
    while($row = mysqli_fetch_array($sql)) {
        echo htmlentities($row['regdate']) . "<br>" ;
        echo htmlentities($row['topic_body']);
    }
}
else { echo 'not found'; }

Thanks

 

[aHMAD_SQaLli]

NO HELP ??? !!! ...

[NomadicJosh]

I think what you need is mysqli_stmt_fetch, and you should also take a look at mysqli_prepare. Those two resources should help steer you into the right direction.

[Barand]

NO HELP ??? !!! ...

 

Apologies for not being online when you posted. Had I known you were in such a hurry I would have sat in front of my screen all day just waiting for you to post a problem.

[racken]

use mysqli prepare and fetch http://php.net/manual/en/mysqli.quickstart.prepared-statements.php

[aHMAD_SQaLli]

I think what you need is mysqli_stmt_fetch, and you should also take a look at mysqli_prepare. Those two resources should help steer you into the right direction.

thanks, it's perfect !

[Destramic]

Apologies for not being online when you posted. Had I known you were in such a hurry I would have sat in front of my screen all day just waiting for you to post a problem.

Brilliant! Haha