Question

This query keeps failing with

Integrity constraint violation: 1048 Column ‘login_name’ cannot be null

My insert statement is…

    $insertUserQuery = 'INSERT INTO `users` (                     `login_name`,                     `password`,                      `first_name`,                     `last_name`,                     `company_name`,                     `company_address`,                     `country`,                     `email`,                     `phone_number`,                     `agency_type`,                     `sold_before`,                     `authorised`,                     `current_module`                     )                     VALUES (                    :login_name, :login_password, :first_name, :last_name, :company_name, :company_address, :country, :email, :phone_number, :agency_type, :sold_before, 0, 0);';      $bindings = array(':login_name'      => $loginName,                       ':login_password'  => sha1($password . Config::PASSWORD_SALT),                       ':first_name'      => $firstName,                       ':last_name'       => $lastName,                       ':company_name'    => $companyName,                       ':company_address' => $companyAddress,                       ':country'         => $country,                       ':email'           => $emailAddress,                       ':phone_number'     => $phone,                       ':agency_type'     => null,                       ':sold_before' => null                         );  print_r($bindings);                       Db::query($insertUserQuery, $bindings); 

My database class can be found at another question. The print_r() tells me that the array definitely has a value.

May it have something to do with me using the word ‘password’ which is also a MySQL function?

Does PDO support prepared statements with INSERT in the same fashion as it does with SELECT?

Do I need to quote around the values, example ‘:login_name’?

Answer 1

PDO::query doesn’t support prepared statement syntax does it? Give PDO::prepare and PDOStatement::execute a read. You probably want something like:

$insertUserQuery = 'INSERT INTO `users` (`login_name`, ...) ' .     'VALUES (:login_name, ...);'; $bindings = array(':login_name' => $loginName, ...); $stmt = Db::prepare($insertUserQuery); $stmt->execute($bindings); 

You can also call $stmt->bindValue() instead of building an array of bindings. I think that explicitly binding each value is a little nicer since you can verify the types right there.

EDIT: sorry jcinacio, I didn’t see that your comment was almost identical until after I posted.