PHP:为什么我的PDO准备语句不能将数据插入到我的表中


PHP: Why won't my PDO prepared statement insert data into my table?

PHP 5.6.11
MySQL 5.6
CentOS 7 (with MySQL 5.6)

注意:这不是我的文字代码。我已经抽象了某些部分。执行时不会给出任何错误。不会将数据写入contact表。

我有一个名为联系人的表...

CREATE TABLE IF NOT EXISTS `database`.`contact`(
`contact_id` VARCHAR(32) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci NOT NULL COMMENT 'Contact ID',
`firstname` VARCHAR(30) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci NOT NULL COMMENT 'First name.',
`lastname` VARCHAR(30) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci NOT NULL COMMENT 'Last name.',
`email` VARCHAR(128) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci NOT NULL COMMENT 'E-mail address.',
`phone` VARCHAR(12) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL COMMENT 'Telephone number',
`country_code` VARCHAR(7) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL COMMENT 'Country code number',
`extension` VARCHAR(5) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL COMMENT 'Telephone extension',
`company` VARCHAR(50) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL COMMENT 'Company affiliation.',
`address` VARCHAR(100) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL COMMENT 'Street Address.',
`city` VARCHAR(50) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL COMMENT 'City.',
`state` VARCHAR(6) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL COMMENT 'State.',
`zip` VARCHAR(10) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL COMMENT 'Zip code.',
`country` VARCHAR(50) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL COMMENT 'Country.',
`phone_type` ENUM('Cellular', 'Landline') CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci NOT NULL COMMENT 'Telephone type',
`time_to_contact` ENUM('A.M.', 'P.M.') CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci NOT NULL COMMENT 'Morning or Afternoon',
`contact_pref` ENUM('Email', 'Phone', 'Mail') CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci NOT NULL COMMENT 'Contact preference',
`job_location` VARCHAR(100) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci DEFAULT NULL COMMENT 'Jobsite location',
`news_subscribed` ENUM('N', 'Y') CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci NOT NULL COMMENT 'Contact subscribed to newsletter.',
`news_subs_token` VARCHAR(60) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci NOT NULL COMMENT 'Used when subscribing to the newsletter.',
`news_unsub_token` VARCHAR(60) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci NOT NULL COMMENT 'Used when unsubscribing to the newsletter.',
`message_time` TIMESTAMP DEFAULT CURRENT_TIMESTAMP COMMENT 'Time of last message.',
CONSTRAINT `contactconstr01` PRIMARY KEY (`contact_id`))
ENGINE=InnoDB DEFAULT CHARACTER SET = utf8mb4 DEFAULT COLLATE = utf8mb4_unicode_ci COMMENT 'Contacts (external) table.';

。我想使用这个带有嵌入式预准备语句的存储过程来插入记录。

   CREATE DEFINER = 'blahfoobar'@'localhost' 
PROCEDURE `database`.add_contact_sp(
            IN contact_id VARCHAR(32),
            IN firstname VARCHAR(30),
            IN lastname VARCHAR(30),
            IN email VARCHAR(128),
            IN phone VARCHAR(12),
            IN country_code VARCHAR(7),
            IN extension VARCHAR(5),
            IN company VARCHAR(50),
            IN address VARCHAR(100),
            IN city VARCHAR(50),
            IN st VARCHAR(6),
            IN zip VARCHAR(10),
            IN country VARCHAR(50),
            IN phone_type VARCHAR(8),
            IN time_to_contact VARCHAR(4),
            IN contact_preference VARCHAR(5),
            IN job_location VARCHAR(100),
            IN news_subscribed VARCHAR(1),
            IN news_sub_token VARCHAR(60),
            IN news_unsub_token VARCHAR(60))
  COMMENT 'Insert new contact record.'
 LANGUAGE SQL
DETERMINISTIC
 MODIFIES SQL DATA
      SQL SECURITY DEFINER  
    BEGIN
          SET @id      = contact_id;
          SET @fName   = firstname;
          SET @lName   = lastname;
          SET @eMail   = email;
          SET @p       = phone;
          SET @cc      = country_code;
          SET @ext     = extension;
          SET @comp    = company;
          SET @addr    = address;
          SET @c       = city;
          SET @s       = st;
          SET @zCode   = zip;
          SET @coun    = country;
          SET @pType   = phone_type;
          SET @ttc     = time_to_contact;
          SET @cPref   = contact_preference;
          SET @jLoc    = job_location;
          SET @news    = news_subscribed;
          SET @nSubT   = news_subs_tokens;
          SET @nUnsubT = news_unsub_token; 
          PREPARE `insert_contact_stmt` FROM
                  'INSERT INTO `contact`
                   VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)';
          EXECUTE `insert_contact_stmt` USING @id, @fName, @lName, @eMail, @p, @cc, @ext, @comp, @addr, @c, @s, @zCode, @coun, @pType, @ttc, @cPref, @jLoc, @news, @nSubT, @nUnsubT;
          DEALLOCATE PREPARE `insert_contact_stmt`;
      END//

安全设置如下所示。

GRANT INSERT ON TABLE `database`.`contact` TO 'blahfoobar'@'localhost';
GRANT SELECT ON TABLE `database`.`contact` TO 'blahfoobar'@'localhost';
GRANT UPDATE ON TABLE `database`.`contact` TO 'blahfoobar'@'localhost';
GRANT DELETE ON TABLE `database`.`contact` TO 'blahfoobar'@'localhost';
GRANT EXECUTE ON PROCEDURE `database`.`add_contact_sp` TO 'blahfoobar'@'localhost', 'blahblahblah'@'localhost';

。其中'blahblahblah'@'localhost'表示在PDO连接阶段连接到MySQL服务器的实际用户(未显示)。

我的PHP,子类Contact(超类Person)的受保护方法如下所示,其中靠近顶部的$db对象是PDO连接的包装器对象。

protected function insert()
{   
    try
    {            
        $this->db->startTransaction();
        $stmt = $this->db->prepare('add_contact_sp(:contact_id, :firstname, :lastname, :email, :phone, :country_code, :extension, :company, :address, :city, :state, :zip, :country, :phone_type, :time_to_contact, :contact_pref, :job_location, :news_subscribed, :news_sub_token, :news_unsub_token');
        if($stmt instanceof PDOStatement)
        {
            //Where $stmt is passed by reference.
            $this->db->bindParam($stmt, ':contact_id', $this->id);
            $this->db->bindParam($stmt, ':firstname', $this->firstname);
            $this->db->bindParam($stmt, ':lastname', $this->lastname);
            $this->db->bindParam($stmt, ':email', $this->email);
            $this->db->bindParam($stmt, ':phone', $this->phone);
            $this->db->bindParam($stmt, ':country_code', $this->countryCode);
            $this->db->bindParam($stmt, ':extension', $this->extension);
            $this->db->bindParam($stmt, ':company', $this->company);
            $this->db->bindParam($stmt, ':address', $this->address);
            $this->db->bindParam($stmt, ':city', $this->city);
            $this->db->bindParam($stmt, ':state', $this->state);
            $this->db->bindParam($stmt, ':zip', $this->zip);
            $this->db->bindParam($stmt, ':country', $this->country);
            $this->db->bindParam($stmt, ':phone_type', $this->phoneType);     
            $this->db->bindParam($stmt, ':time_to_contact', $this->timeToContact);
            $this->db->bindParam($stmt, ':contact_pref', $this->contactPref);
            $this->db->bindParam($stmt, ':job_location', $this->jobLocation);
            $this->db->bindParam($stmt, ':news_subscribed', $this->newsSubscribed);
            $this->db->bindParam($stmt, ':news_sub_token', $this->newsSubToken);
            $this->db->bindParam($stmt, ':news_unsub_token', $this->newsUnsubToken);  
            if(!$stmt->execute())
            {
                print_r($stmt->errorInfo(), true);  //Just for debugging.
            }
            else
            {
                $this->db->commit();  
            }
        }
        else 
        {
            throw new PDOException("Failed to prepare the PDO statement.");
        }
    }
    catch(Exception $e)
    {
        $this->db->rollback();
        return false;
    }
    return true;
}

没有错误。不会向数据库写入任何数据。无。是否可以将PDO事务与嵌入预准备语句的MySQL存储过程一起使用?

以下是我根据请求的数据库连接选项。

$options  = [
                PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
                PDO::ATTR_PERSISTENT => true,
                PDO::ATTR_EMULATE_PREPARES => false,
                PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
                PDO::MYSQL_ATTR_INIT_COMMAND => 'SET NAMES ''utf8mb4'' COLLATE ''utf8mb4_unicode_ci'''
            ];

PDO::p repare 语句中还有其他错误,但这是第一个错误。您在 PREPARE 语句的末尾缺少括号。它应该看起来像这样。其余的与参数和绑定的顺序有关。您有二十个参数。确保它们按正确的相应顺序排列。现在,他们不是。

    $stmt = $this->db->prepare('add_contact_sp(:contact_id, :firstname, :lastname, :email, :phone, :country_code, :extension, :company, :address, :city, :state, :zip, :country, :phone_type, :time_to_contact, :contact_pref, :job_location, :news_subscribed, :news_sub_token, :news_unsub_token)');