Thanks for the example runrig. The problem was fairly specific in that it only went wrong it you called bind_param_inout with undef values initially then changed them to strings shorter than 28 characters. However, it was certainly a bug and I was a little surprised no one has hit it before.