WHERE子句與PDO混淆

Question

當您需要將一個值同時與幾個列匹配時，我在理解如何使用預準備語句時遇到了一些麻煩。

換句話說什麼，而不是這樣做：

$stmt = $dbh->prepare("SELECT * FROM REGISTRY where name = ?"); 
$stmt->bindParam(1, $name); 

我想做到這一點： '？'

$stmt = $dbh->prepare("SELECT * FROM REGISTRY where firstname = ? or lastname = ?"); 

既代表相同的字符串。

Answer 1

嘗試...

$stmt = $dbh->prepare("SELECT * FROM registry WHERE firstname = :name OR lastname = :name;"); 
$stmt->bindParam(':name', $name); 

Answer 2

爲什麼不直接使用一個命名參數：

$stmt = $dbh->prepare("SELECT * FROM REGISTRY WHERE firstname = :name OR lastname = :name"); 
$stmt->bindParam(':name', $name); 

Answer 3

$stmt = $dbh->prepare("SELECT * FROM registry WHERE firstname = ? 
OR lastname = ? ;"); 
$stmt->bindParam(1, $name);