Search without returning PDO data

Question

My variable is being passed but the filter process is always not returning anything.

try 
{
   $keyword = trim($_GET["keyword"]);
   if (!empty($keyword)) 
   {

       $sql = "SELECT * FROM noticias WHERE 
         titulo LIKE :keyword OR conteudo LIKE :keyword ORDER BY Nid";

       $stmt = $DB->prepare($sql);

       $likekeyword = "%".$keyword."%";
       $stmt->bindParam(':keyword', $likekeyword, PDO::PARAM_STR);

   } 
   else 
   {
       $sql = "SELECT * FROM noticias WHERE 1 ORDER BY Nid ";
       $stmt = $DB->prepare($sql);
   }

   $stmt->execute();

tried (titulo LIKE :termo) OR ...

Updated the strange and that the result of if empty blank is working which leads me to believe that and in the same consultation part

Answer 1

I believe your problem will be solved in this way:

try {
     $termo = trim($_GET["termo"]);
      if (!empty($termo)) {
$sql = "SELECT * FROM noticias WHERE titulo LIKE :termo OR conteudo LIKE :termo ORDER BY Nid";
$stmt = $DB->prepare($sql);

$likeTermo = "%".$termo."%";
$stmt->bindParam(':termo', $likeTermo, PDO::PARAM_STR);
...

Consider these differences:

PDOStatement::bindValue() -> The variable is linked to the reference and will only be evaluated when the PDOStatement::execute() is called. And in this case, only values are accepted as argument.

If you use $stmt->bindValue(":termo", $termo);.
The value must exist, otherwise an error will occur.

PDOStatement::bindParam() -> Already in this case, the expected argument is a reference (variable or constant) and cannot be a primitive type like a string or loose number, function return or method.

Invalid examples:

$stmt->bindParam(':termo', 10); // Inválido
$stmt->bindParam(':termo', getValue()); // Inválido

Answer 2

Dear friend, I don’t know if there are any more errors there, but from this bit of code you have there, I see only one irregularity capable of causing this problem, which is the number of parameters linked through the bindParam. In your consultation SQL were very specific providing two placeholders, with the names :title and :contents, but during the part where you linked the values of those respective placeholders, you just passed one.

Here are some corrections I applied to your script:

Example:

<?php

// Valores Extrnos
$key = isset($_GET["keyword"]) ? trim( (string) $_GET["keyword"]) : NULL;

// Conectar PDO
try{
        
    $opc = array(PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION);
    $pdo = new PDO("mysql:hostname=localhost;dbname=banco_de_dados;", "root", "", $opc);    
    
    //$sql = "SELECT * FROM noticias WHERE titulo LIKE :titulo OR conteudo LIKE :conteudo ORDER BY id ASC";
    $sql = "SELECT * FROM noticias WHERE titulo LIKE :titulo OR conteudo LIKE :conteudo ORDER BY Nid";
    $stmt = $pdo->prepare($sql);
    
    $key = "%" . $key . "%";    
    
    $stmt->bindParam(":titulo", $key, PDO::PARAM_STR);    
    $stmt->bindParam(":conteudo", $key, PDO::PARAM_STR);
    $stmt->execute();
    
    // Capturar exceção, se haver uma
    } catch(PDOException $e){                
    echo "Erro: " . $e->getMessage();    
}

// Resultados
if(isset($stmt)){
    while($linhas = $stmt->fetch(PDO::FETCH_OBJ)){
        echo  $linhas->titulo . "<br/>";    
        echo  $linhas->conteudo. "<br/>";
    }    
}

?>

NOTE: Work with the PDO, requires some care, and I also noticed that in this part of your script, you have the try, but I didn’t see the part catch where to capture the exception, in case there is any.

---

References:

PDO::bindParam - PHP.net

Exceptions - PHP.net

Catch - PHP.net