Re: PDO prepared statements and LIKE escaping
| From: | Per Jessen | Date: | Mon, 04 Aug 2008 06:33:44 +0000 |
| Subject: | Re: PDO prepared statements and LIKE escaping | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-277658@lists.php.net to get a copy of this message | ||
Larry Garfield wrote:
> IIRC, the way in SQL to circumvent that is to convert "100%" into
> "100%%". However, that does rather defeat the purpose of a prepared
> statement if I have to do my own escaping anyway, does it not?
Depends on what you perceive the purpose of the prepared statement to
be :-) In this context, I tend to think of performance only. Which is
generally why I can't be bothered with prepared statements in php.
/Per Jessen, Zürich