Re: MySql Injection advice
| From: | Paul M Foster | Date: | Sun, 12 Jul 2009 19:53:19 +0000 |
| Subject: | Re: MySql Injection advice | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-295298@lists.php.net to get a copy of this message | ||
On Sun, Jul 12, 2009 at 09:07:45AM -0400, tedd wrote:
<snip>
>
> As for prepared statements, I'm no authority on them, but from what
> I've read they are not going to be something I'll be practicing
> anytime soon.
Aside from Stuart's comments about slowness, what else have you read
that makes you discount the use of prepared statements? The PDO class
emphasizes that you're safe from SQL injection exploits, which seems a
big plus.
Paul
--
Paul M. Foster