Using PHP have a MySQL statement into multiple PHP variables

Solution:

There are some issue with your code. At first glance, I was missing the PDO object. On closer inspection, I've noticed you were using the wrong concatenation operator and you didn't seem to use Prepared Statements either.

Prepared Statements will protect you from SQL injection as well as users using characters that might cause issues for your MySQL database. I've written the following code for you that shoul deal with all your issues. Please make sure to take a look at the comments inside:

<?php
session_start();

//Get Username
$username = $_SESSION['username'];

//MySQL Server Data
$dbhost = "";
$dbname = "";
$dbuser = "";
$dbpass = "";

//PDO Object
$dsn = 'mysql:host=' . $dbhost . ';dbname=' . $dbname;
// Set PDO options
$options = array(
    PDO::ATTR_PERSISTENT    => true,
    PDO::ATTR_ERRMODE       => PDO::ERRMODE_EXCEPTION
);
// Create a new PDO instance
try{
    $pdo = new PDO($dsn, $dbuser, $dbpass, $options);
}
// Catch any errors
catch(PDOException $e){
    print $e->getMessage();
    exit;
}

try {
    //Setup Query
    $sql = "SELECT * FROM users WHERE username = :username";

    //Prepare Query
    $pdo->prepare($sql);

    //Bind Values (to prevent SQL injection)
    $pdo->bindParam(':username', $username);

    //Execute Query
    $pdo->execute();

    //Fetch Data
    $data = $pdo->fetch(PDO::FETCH_ASSOC);

    //Combine results
    $signature = $data['firstname']. " " .$data['lastname'];
    echo $signature;
} catch (PDOException $e) {
    print $e->getMessage();
    exit;
}

?>
Copy code

Didn't find the answer?

Our community is visited by hundreds of web development professionals every day. Ask your question and get a quick answer for free.