Question

Not sure what’s going on, I keep getting errors. I have reduced the problem down to quite a small test-case, see below:

---

login.html

<form action="login.php" method="post">
    <input type="email" name="email" required />
    <input type="password" name="password" required />

    <input type="submit" value="Login"/>
</form>

login.php

$email    = $_POST["email"];
$password = sha1($_POST["password"]);

$stid2 = oci_parse($conn, 'SELECT EMAIL, PASSWORD FROM TUSERS where EMAIL =: email AND PASSWORD =: password');
oci_execute($stid2);

$nrows = oci_fetch($stid2);

print var_dump($nrows);

Errors

Warning: oci_execute(): ORA-01008: not all variables bound in login.php on line 5

Warning: oci_fetch(): ORA-24374: define not done before fetch or execute and fetch in login.php on line 7 bool(false)

Answer 1

You added variable placeholders into the query but didn’t bind anything to them

$stid2 = oci_parse($conn, 'SELECT EMAIL, PASSWORD FROM TUSERS where EMAIL =:email AND PASSWORD =:password');
oci_bind_by_name($stid2, ':email', $email);
oci_bind_by_name($stid2, ':password', $password);
oci_execute($stid2);

See oci_bind_by_name