PHP PDO 使用 bindParam 第一个参数(不带冒号)

Question

这个问题已经有答案了:

Is the leading colon for parameter names passed to PDOStatement::bindParam() optional? (1 个回答)

已关闭 去年。

请检查一下

  $user_id = (int)$_GET['user_id'];
  $sql = 'DELETE FROM users WHERE user_id=:user_id';
  $query = $db->prepare($sql);
  $query->bindParam('user_id',$user_id,PDO::PARAM_STR);

  $delete = $query->execute();

实际上它正在正常工作，并且它从数据库中删除了用户行

但这里的问题是我没有在绑定(bind)查询中写“:”该列我的意思是

这应该是错误的

$query->bindParam('user_id',$user_id,PDO::PARAM_STR);

这应该是正确的

$query->bindParam(':user_id',$user_id,PDO::PARAM_STR);

但它不会抛出任何异常，并且用户行已成功删除

对此有何解释？

Answer 1

这篇文章解释了为什么需要使用冒号。

Is the leading colon for parameter names passed to PDOStatement::bindParam() optional?

来自帖子:

No, since the documentation doesn't mention this I think it's safe to assume that this behaviour isn't officially supported and shouldn't be relied upon.

However, it does actually happen to work (in PHP 5.3.24 at least) - internally a colon will be added to the parameter if it's missing (see ext/pdo/pdo_stmt.c:363 in the PHP 5.3.24 source code).