Variable binding in PHP ADOdb

前端 未结 2 587
时光说笑
时光说笑 2021-01-14 04:16

Does ADOdb do data sanitation or escaping within the same functionality by default? Or am I just confusing it with Code Igniter\'s built-in processes?

Does binding v

相关标签:
2条回答
  • 2021-01-14 05:10

    Correct - bound parameters are not vulnerable to SQL injection attacks.

    0 讨论(0)
  • 2021-01-14 05:10

    yes, you pass the array of parameters.

    $rs = $db->Execute('select * from table where val=?', array('10'));
    

    Rest of their docs can be found here:

    0 讨论(0)
提交回复
热议问题