Formulating LIKE queries using prepared statements and named placedholders

bettermysql-advanced-like.php

<?php
  // Assuming that database connection is already open
  
  // Get username
  $username = 'john';
  $id = 1000;
  
  // Using named placeholders
  $stmt = $db->prepare("SELECT user, email, country FROM users WHERE user LIKE :username AND id > :id")
  
  // The order of objects in the array does not matter
  // Here we prepend and/or append the wildcard symbol '%' to $username
  $stmt->execute(array(':username'=>'%'.$username.'%',
                       ':id'=>$id));
?>