Parse Error: (T_ENCAPSED_AND_WHITESPACE) [closed] - php

Question

Closed. This question is not reproducible or was caused by typos. It is not currently accepting answers.
This question was caused by a typo or a problem that can no longer be reproduced. While similar questions may be on-topic here, this one was resolved in a way less likely to help future readers.
Closed 8 years ago.
Improve this question
include 'connect.php';
if ($stmt = $mysqli->prepare("INSERT users (user_name, user_pass) VALUES (mysql_real_escape_string ($_POST['user_name'], sha1($_POST['user_pass']"))
{
$stmt->bind_param("ss", $user_name, $user_pass);
$stmt->execute();
$stmt->close();
}
I get this error on the line of code above, I've been staring at it for ages but can't figure out what's wrong. I'm new to PHP, MySQL and HTML. Please help me.
Parse error: syntax error, unexpected '' (T_ENCAPSED_AND_WHITESPACE), expecting identifier (T_STRING) or variable (T_VARIABLE) or number (T_NUM_STRING) in C:\xampp\htdocs\signup.php on line 77

Answer 1

The good thing is you are trying to prepare, the bad news is you doing it wrong:
$username = $_POST['user_name'];
$password = $_POST['user_pass'];
$query = "INSERT users (user_name, user_pass) VALUES (?, sha1(?)) ";
/* create a prepared statement */
if ($stmt = $mysqli->prepare($query)) {
/* bind parameters for markers */
$stmt->bind_param("ss", $username, $password);
/* execute query */
$stmt->execute();
/* close statement */
$stmt->close();
}
/* close connection */
$mysqli->close();
issues:
mysql_real_escape_string is deprecated
mysqli_real_escape_string would be useless
Your string concatenation is wrong