So this is secure?

[9three]

Hey,

 

I'm still getting used to using MySQLi. I just wanted to verify if this is actually secure.

 

$mysqli = new mysqli('localhost', 'user', 'password', 'world') or die('Unable to connect '.mysqli_connect_error());

$stmt = $mysqli->prepare("INSERT INTO CountryLanguage VALUES (?, ?, ?, ?)");
$stmt->bind_param('sssd', $code, $language, $official, $percent);

$code = $_POST['code'];
$language = $_POST['language'];
$official = $_POST['official'];
$percent = $_POST['percent'];

$stmt->execute(); 

 

No need to escape the POST variables because they are bounded?

[soak]

Correct.

[9three]

thanks.