Albright Posted December 14, 2006 Share Posted December 14, 2006 The PHP docs seem to imply that using PDO as recommended (prepare a query, assign variables with bindParam(), then execute) makes it no longer necessary to do any sort of manual escaping with data. Is that indeed the case? Are there any security caveats or gotchas to using PDO, especially any above and beyond those found with the "standard" DB access functions for SQLite, MySQL, etc?PDO still being fairly new, it seems kinda hard to find much concrete information about on the internets, so I'd appreciate any insight anyone could bring. Link to comment https://forums.phpfreaks.com/topic/30689-is-database-access-with-pdo-inherently-secure/ Share on other sites More sharing options...
Nameless12 Posted January 14, 2007 Share Posted January 14, 2007 if you use prepared statements in pdo 100% of the time sql injection is impossible Link to comment https://forums.phpfreaks.com/topic/30689-is-database-access-with-pdo-inherently-secure/#findComment-160218 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.