Php-PDO-Parse错误:语法错误,意外'';

Php-PDO-Parse错误:语法错误,意外'';,php,mysql,pdo,Php,Mysql,Pdo,我有这个功能 public function selection($table, $condition_var,$condition_val) { if ($condition_var != '') { $stm = $this->dbh->prepare("SELECT * FROM " . $table . " WHERE " . $condition_var=.":".$condition_var. " ");

我有这个功能

public function selection($table, $condition_var,$condition_val)
    {
        if ($condition_var != '') {

           $stm = $this->dbh->prepare("SELECT * FROM " . $table . " WHERE " . $condition_var=.":".$condition_var. " ");
           $stm->bindParam(":".$condition_var, $condition_val);
          return $stm->execute();
        }

    }
我是在这条线下到达这里的

$stm = $this->dbh->prepare("SELECT * FROM " . $table . " WHERE " . $condition_var=.":".$condition_var. " ");
我不知道我做错了什么。请检查

请参考以下内容:


$condition\u var=”中的流氓
=
。“
我真的希望所有这些输入参数都要小心限制。这里有什么问题吗?您好,先生,我想在两端使用相同的变量,比如$condition\u var=:$condition\u varso,您的列名和值相同吗?不,在列中,我使用字符串变量,对于列值,我发送一些值$condition_valbinding参数实际分配变量。然后您需要在查询中使用指定的变量。
$stm = $this->dbh->prepare("SELECT * FROM " . $table . " WHERE " . $condition_var."=:condition_val");
$stm->bindParam(":condition_val", $condition_val);
$stm = $this->dbh->prepare("SELECT * FROM " . $table . " WHERE " . $condition_var . " = :param");
$stm->bindParam(":param", $condition_val);