Re: [RFC] is_literal
| From: | Pierre | Date: | Mon, 14 Jun 2021 08:07:04 +0000 |
| Subject: | Re: [RFC] is_literal | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-114853@lists.php.net to get a copy of this message | ||
Le 14/06/2021 à 02:41, Mike Schinkel a écrit :
A big*NO* on warnings. Full stop.Hello, I agree. A lot of DBAL / ORM / query builders tools exist and use the mysqli_, pgsql_ or PDO libraries as simple arbitrary SQL executor, and handle the security aspect at a higher level. Any warning raised by the low level functions would be too restrictive, and in almost all cases always false positives. Regards, -- Pierre