Add parameters to a PHP mssql query

Question

Given the following query (in the code, NOT a stored procedure); how can I add parameters to the query rather than including the condition values directly in the query? In o

Answer 1

Use PDO to make it secure

http://php.net/manual/en/book.pdo.php