Albright Posted December 14, 2006 Share Posted December 14, 2006 The PHP docs seem to imply that using PDO as recommended (prepare a query, assign variables with bindParam(), then execute) makes it no longer necessary to do any sort of manual escaping with data. Is that indeed the case? Are there any security caveats or gotchas to using PDO, especially any above and beyond those found with the "standard" DB access functions for SQLite, MySQL, etc?PDO still being fairly new, it seems kinda hard to find much concrete information about on the internets, so I'd appreciate any insight anyone could bring. Quote Link to comment https://forums.phpfreaks.com/topic/30689-is-database-access-with-pdo-inherently-secure/ Share on other sites More sharing options...
Nameless12 Posted January 14, 2007 Share Posted January 14, 2007 if you use prepared statements in pdo 100% of the time sql injection is impossible Quote Link to comment https://forums.phpfreaks.com/topic/30689-is-database-access-with-pdo-inherently-secure/#findComment-160218 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.