Question

I was following the prepared statement example on the php.net site and I cant seem to get my version to work.

$link = mysql_connect("localhost","root","mypassword") or die (mysql_error());

$query= $link->prepare("select * from users WHERE userid = ? AND password=password('?')");
$query->bindParam(1, $userid);
$query->bindParam(2, $password);
$query->execute();

if (mysql_num_rows($query)==1)
    {
        echo "Welcome, ",$userid,"\n";
    }
    mysql_close($link);

I get the error: syntax error, unexpected T_VARIABLE

Answer 1

Change echo "Welcome, ",$userid,"\n";

to

echo "Welcome, " . $userid . "\n";