Почему запрос не работает?

Question

[heIIfire]

$title = 'playstation 4';
	$author = 'sony';
	$pubyear ='2014';
	$price = '30000';
	$sql = "INSERT INTO catalog (title, author, pubyear,price) VALUES ('" . $title . "','" . $author . "','" . $pubyear . "','" . $price . "')";
	$link = mysqli_connect('localhost', 'root', '', 'db');
	if($stmt = mysqli_prepare($link, $sql))
		echo "Hello world";
	mysqli_stmt_bind_param($stmt, "ssii", $title, $author, $pubyear, $price);

Выдает предупреждение - Warning: mysqli_stmt_bind_param() [function.mysqli-stmt-bind-param]: Number of variables doesn't match number of parameters in prepared statement in X:\home\snetsunts.com\www\test.php on line 10

Answer 1

[Daemon23RUS]

Замените

$sql = "INSERT INTO catalog (title, author, pubyear,price) VALUES ('" . $title . "','" . $author . "','" . $pubyear . "','" . $price . "')";

на

$sql = "INSERT INTO catalog (title, author, pubyear,price) VALUES (?,?,?,?)";