Re: Using Database (PHP)

On Tue, Jul 14, 2020, 12:41 AM Ashkar Dev <ashkardev@gmail.com> wrote: > Thanks, > Do you think PDO is better or pg_query_params? > because PDO is supported by PostgreSQL. > > On Mon, Jul 13, 2020 at 8:18 PM Jigar Dhulla <jigar.tidus@gmail.com> > wrote: > >> >> >> On Mon, Jul 13, 2020, 3:38 PM Ashkar Dev <ashkardev@gmail.com> wrote: >> >>> Does anyone have an answer? >>> >>> I have developed a web application, I used (pg_query) for working with >>>> the database: >>>> >>>> 1. should I convert all (pg_query) to (pg_query_params) or to (PDO)? >>>> 2. whats different between all these three types? >>>> 3. when it is necessary to use (pg_prepare)? >>>> >>>> Thanks. >>>> >>> Pdo is recommended if you plan to switch to other database. And >> parameterized queries are better as it prevents SQL injection (attack). >> > Yes, PDO is better from futuristic point of view. Can't comment which one is better in terms of efficiency. Guess is that pg_ will be faster as it is dedicated client for postgresql. Where as PDO is interface/generic and will need additional extension pdo_pgsql for application to connect to postgresql. I would still prefer PDO. >