The following code example shows how to bind parameters to create parameterized statements.

Reusable Statements

The odbc_prepare function creates prepared statements, which can be re-used across multiple calls to odbc_execute. The statement object can be used to fetch results like a non-parameterized query.

$stmt = odbc_prepare($cnx, "SELECT InvoiceId, InvoiceId FROM Invoices WHERE Supplier = ?");

odbc_execute($stmt, array("Bob 1"));
while ($row = odbc_fetch_array($stmt)) {
    echo "InvoiceId = ", $row["InvoiceId"], "\n";
    echo "InvoiceId = ", $row["InvoiceId"], "\n";
}

odbc_execute($stmt, array("Bob 2"));
while ($row = odbc_fetch_array($stmt)) {
    echo "InvoiceId = ", $row["InvoiceId"], "\n";
    echo "InvoiceId = ", $row["InvoiceId"], "\n";
}