Weird issues while executing a procedure through php

Question

Here is my issue. I have a procedure and i am trying to execute my sql line from php and it wont work. However if I execute my sql line from oracle SQLDeveloper it works. So im not sure what could be going on.
here is my error...
[12-Aug-2008 16:53:48] PHP Warning:  oci_execute() [<a href='function.oci-execute'>function.oci-execute</a>]: ORA-06550: line 1, column 8:
PLS-00103: Encountered the symbol "" when expecting one of the following:
   begin function package pragma procedure subtype type use
   <an identifier> <a double-quoted delimited-identifier> form
   current cursor
The symbol "" was ignored.
ORA-06550: line 2, column 26:
PLS-00103: Encountered the symbol "" when expecting one of the following:
   begin function package pragma procedure subtype type use
   <an identifier> <a double-quoted delimited-identifier> form
   current  in /shared/htdocs/voting/vote.php on line 133and here is my sql from php...
DECLARE
     U VARCHAR2(200);
     V VARCHAR2(200);
     E NUMBER;
     I VARCHAR2(200);
BEGIN
     U := '{$currentuser}';
     V := '{$votedfor}';
     E := {$electionid};
     I := '{$address}';
     VT_PLACE_VOTE(
          U => U,
          V => V,
          E => E,
          I => I
END;any help would be greate
Message was edited by:
amTZ

Answer 1

Use bind variables. This is a non-negotiable. In PHP this will look something like this:
$dbHost = $dbh->prepare( "begin MyFooProc( empID=>?, deptName=>?, empName=>? ); end;" );
$dbHost->bind_param( 1, $employeeID );
$dbHost->bind_param_inout( 2, $deptName, 100 );
$dbHost->bind_param_inout( 3, $Surname, 100 );
$dbHost->execute();
Suggest that you use a PHP forum - this has very little to do with PL/SQL itself.