php-为准备好的语句绑定多个参数

我的PHP看起来像这样：

$sql1="SELECT @rownum := @rownum + 1 Rank, q.* FROM (SELECT @rownum:=0) r,(SELECT  * ,sum(`number of cases`) as tot, sum(`number of cases`) * 100 / t.s AS `% of total` FROM `myTable` CROSS JOIN (SELECT SUM(`number of cases`) AS s FROM `myTable` where `type`=:criteria and `condition`=:diagnosis) t where `type`=:criteria and `condition`=:diagnosis group by `name` order by `% of total` desc) q"";
$stmt = $dbh->prepare($sql1);
$stmt->bindParam(':criteria', $search_crit, PDO::ParaM_STR);
$stmt->bindParam(':diagnosis', $diagnosis, PDO::ParaM_STR);
$stmt->execute();
$result1 = $stmt->fetchAll(PDO::FETCH_ASSOC);
header('Content-type: application/json');
echo json_encode($result1);

我在此行出现错误：$stmt-> execute();

错误提示：

PHP Fatal error: Uncaught exception ‘PDOException’ with message ‘sqlSTATE[HY093]: Invalid parameter number’ in PHP/rankings.PHP:39

堆栈跟踪：

“#”0 PHP/rankings.PHP(39): PDOStatement->execute()

“#”1 {main}
thrown in PHP/rankings.PHP on line 39

我该如何解决？我知道我可以使用准备好的语句传递多个变量,但是我不太确定该怎么做.

解决方法:

查询中只能使用一次参数

$sql1="SELECT @rownum := @rownum + 1 Rank, q.* FROM (SELECT @rownum:=0) r,(SELECT  * ,sum(`number of cases`) as tot, sum(`number of cases`) * 100 / t.s AS `% of total` FROM `myTable` CROSS JOIN (SELECT SUM(`number of cases`) AS s FROM `myTable` where `type`=:criteria and `condition`=:diagnosis) t where `type`=:criteria2 and `condition`=:diagnosis2 group by `name` order by `% of total` desc) q";
$stmt = $dbh->prepare($sql1);       
$stmt->execute(array(':criteria' => $search_crit, ':diagnosis' => $diagnosis, ':criteria2' => $search_crit, ':diagnosis2' => $diagnosis));