Direct Value Binding (bindValue)

The bindValue() method is used to bind a value to a named placeholder in an SQL statement. Unlike bindParam, which binds a variable as a reference, bindValue binds the value immediately when the method is called. This means you can pass a direct string, a number, or even the result of a function as a parameter. It is the best choice when you do not intend to modify the variable value later in the code or when you want to insert fixed values securely.

EXAMPLE

<?php
class Database {
    private $server = "localhost";
    private $username = "root";
    private $password = "";
    private $db_name = "pdo_db";
    public $connection;

    // The constructor establishes a connection when the object is created
    public function __construct() {
        try {
            // Added charset=utf8mb4 for character support
            $dsn = "mysql:host=" . $this->server . ";dbname=" . $this->db_name . ";charset=utf8mb4";
            $this->connection = new PDO($dsn, $this->username, $this->password);
            $this->connection->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
        } catch(PDOException $e) {
            die("Connection failed: " . $e->getMessage());
        }
    }

    public function addSpecialUser($name, $lastName) {
        $sql = "INSERT INTO users (first_name, last_name, email) VALUES (:name, :lastName, :email)";
        $statement = $this->connection->prepare($sql);

        // We bind the variable
        $statement->bindValue(':name', $name);
        $statement->bindValue(':lastName', $lastName);
        
        // We bind a fixed value directly (e.g., system email)
        $statement->bindValue(':email', 'info@support.com');

        return $statement->execute();
    }
}

// USAGE:
$db = new Database();

if ($db->addSpecialUser("System", "Administrator")) {
    echo "System user was safely added to the database pdo_db using bindValue!";
}
?>

RESULT

The result will be displayed here...

Practical Application: The bindValue method is ideal when you want to insert data into the database that is fixed or will not change within a loop (e.g., default statuses or direct inputs). Check the process at home by following these steps:

Open the XAMPP control panel and start the Apache and MySQL modules.
Open phpMyAdmin in your browser and, under the "SQL" tab, create the database pdo_db and the table users using the code below.
The value is bound immediately, providing the same level of security against SQL injections as bindParam.
Create a file in your code editor, insert the example below, and run it via your local server.