Non-Emulated Prepared Statement support from MS SQL Server through PHP on Linux
问题 Summary I'm attempting to use prepared statements to stop SQL Injections, but am unable to find the support I need to guarantee it is working properly. Scenario I am hosting a site on Linux which is connecting to a Microsoft SQL Server with FreeTDS version 0.91, specifically using FreeTDS's dblib . I have set the tds version to 7.4 for the database connection, and am using PHP's PDO object. According to the FreeTDS documentation, 4.2 does not support prepared statements: TDS 4.2 has