Add optional $params argument to query/execute adapter methods

src/Phinx/Db/Adapter/AdapterInterface.php

@@ -265,10 +265,11 @@ public function rollbackTransaction();
      * Executes a SQL statement and returns the number of affected rows.
      *
      * @param string $sql SQL
+     * @param array $params parameters to use for prepared query
      *
      * @return int
      */
-    public function execute($sql);
+    public function execute($sql, array $params = []);
 
     /**
      * Executes a list of migration actions for the given table
@@ -293,10 +294,11 @@ public function getQueryBuilder();
      * The return type depends on the underlying adapter being used.
      *
      * @param string $sql SQL
+     * @param array $params parameters to use for prepared query
      *
      * @return mixed
      */
-    public function query($sql);
+    public function query($sql, array $params = []);
 
     /**
      * Executes a query and returns only one row as an array.

src/Phinx/Db/Adapter/AdapterWrapper.php

@@ -151,17 +151,17 @@ public function disconnect()
     /**
      * @inheritDoc
      */
-    public function execute($sql)
+    public function execute($sql, array $params = [])
     {
-        return $this->getAdapter()->execute($sql);
+        return $this->getAdapter()->execute($sql, $params);
     }
 
     /**
      * @inheritDoc
      */
-    public function query($sql)
+    public function query($sql, array $params = [])
     {
-        return $this->getAdapter()->query($sql);
+        return $this->getAdapter()->query($sql, $params);
     }
 
     /**

src/Phinx/Db/Adapter/PdoAdapter.php

@@ -182,7 +182,7 @@ public function disconnect()
     /**
      * @inheritDoc
      */
-    public function execute($sql)
+    public function execute($sql, array $params = [])
     {
         $sql = rtrim($sql, "; \t\n\r\0\x0B") . ';';
         $this->verboseLog($sql);
@@ -191,7 +191,10 @@ public function execute($sql)
             return 0;
         }
 
-        return $this->getConnection()->exec($sql);
+        $stmt = $this->getConnection()->prepare($sql);
+        $result = $stmt->execute($params);
+
+        return $result ? $stmt->rowCount() : $result;
     }
 
     /**
@@ -215,11 +218,14 @@ public function getQueryBuilder()
      *
      * @param string $sql SQL
      *
-     * @return \PDOStatement
+     * @return \PDOStatement|false
      */
-    public function query($sql)
+    public function query($sql, array $params = [])
     {
-        return $this->getConnection()->query($sql);
+        $stmt = $this->getConnection()->prepare($sql);
+        $result = $stmt->execute($params);
+
+        return $result ? $stmt : false;
     }
 
     /**

src/Phinx/Migration/AbstractMigration.php

@@ -193,17 +193,17 @@ public function isMigratingUp()
     /**
      * @inheritDoc
      */
-    public function execute($sql)
+    public function execute($sql, array $params = [])
     {
-        return $this->getAdapter()->execute($sql);
+        return $this->getAdapter()->execute($sql, $params);
     }
 
     /**
      * @inheritDoc
      */
-    public function query($sql)
+    public function query($sql, array $params = [])
     {
-        return $this->getAdapter()->query($sql);
+        return $this->getAdapter()->query($sql, $params);
     }
 
     /**

src/Phinx/Migration/MigrationInterface.php

@@ -137,10 +137,11 @@ public function isMigratingUp();
      * Executes a SQL statement and returns the number of affected rows.
      *
      * @param string $sql SQL
+     * @param array $params parameters to use for prepared query
      *
      * @return int
      */
-    public function execute($sql);
+    public function execute($sql, array $params = []);
 
     /**
      * Executes a SQL statement.
@@ -151,10 +152,11 @@ public function execute($sql);
      * you can set the return type by the adapter in your current use.
      *
      * @param string $sql SQL
+     * @param array $params parameters to use for prepared query
      *
      * @return mixed
      */
-    public function query($sql);
+    public function query($sql, array $params = []);
 
     /**
      * Returns a new Query object that can be used to build complex SELECT, UPDATE, INSERT or DELETE

src/Phinx/Seed/AbstractSeed.php

@@ -128,17 +128,17 @@ public function getName()
     /**
      * @inheritDoc
      */
-    public function execute($sql)
+    public function execute($sql, array $params = [])
     {
-        return $this->getAdapter()->execute($sql);
+        return $this->getAdapter()->execute($sql, $params);
     }
 
     /**
      * @inheritDoc
      */
-    public function query($sql)
+    public function query($sql, array $params = [])
     {
-        return $this->getAdapter()->query($sql);
+        return $this->getAdapter()->query($sql, $params);
     }
 
     /**

src/Phinx/Seed/SeedInterface.php

@@ -94,10 +94,11 @@ public function getName();
      * Executes a SQL statement and returns the number of affected rows.
      *
      * @param string $sql SQL
+     * @param array $params parameters to use for prepared query
      *
      * @return int
      */
-    public function execute($sql);
+    public function execute($sql, array $params = []);
 
     /**
      * Executes a SQL statement.
@@ -108,10 +109,11 @@ public function execute($sql);
      * you can set the return type by the adapter in your current use.
      *
      * @param string $sql SQL
+     * @param array $params parameters to use for prepared query
      *
      * @return mixed
      */
-    public function query($sql);
+    public function query($sql, array $params = []);
 
     /**
      * Executes a query and returns only one row as an array.

tests/Phinx/Db/Adapter/SQLiteAdapterTest.php

@@ -1161,6 +1161,37 @@ public function testQueryBuilder()
         $this->assertEquals(1, $stm->rowCount());
     }
 
+    public function testQueryWithParams()
+    {
+        $table = new \Phinx\Db\Table('table1', [], $this->adapter);
+        $table->addColumn('string_col', 'string')
+            ->addColumn('int_col', 'integer')
+            ->save();
+
+        $this->adapter->insert($table->getTable(), [
+            'string_col' => 'test data',
+            'int_col' => 10,
+        ]);
+
+        $this->adapter->insert($table->getTable(), [
+            'string_col' => null,
+        ]);
+
+        $this->adapter->insert($table->getTable(), [
+            'int_col' => 23,
+        ]);
+
+        $countQuery = $this->adapter->query('SELECT COUNT(*) AS c FROM table1 WHERE int_col > ?', [5]);
+        $res = $countQuery->fetchAll();
+        $this->assertEquals(2, $res[0]['c']);
+
+        $this->adapter->execute('UPDATE table1 SET int_col = ? WHERE int_col IS NULL', [12]);
+
+        $countQuery->execute([1]);
+        $res = $countQuery->fetchAll();
+        $this->assertEquals(3, $res[0]['c']);
+    }
+
     /**
      * Tests adding more than one column to a table
      * that already exists due to adapters having different add column instructions