note 103358 deleted from mysqli.prepare by danbrown
| From: | danbrown@php.net | Date: | Sat, 09 Apr 2011 14:19:58 +0000 |
| Subject: | note 103358 deleted from mysqli.prepare by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-178660@lists.php.net to get a copy of this message | ||
Note Submitter: prwexler at earthlink dot net
----
Actually, the purpose of a prepare statement is to separate user input from SQL commands. This
increases security by preventing a user from executing his own SQL code and damaging the integrity
of a database.