note 127178 deleted from pdo.exec by girgias
| From: | girgias@php.net | Date: | Mon, 13 Jun 2022 19:21:40 +0000 |
| Subject: | note 127178 deleted from pdo.exec by girgias | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-218593@lists.php.net to get a copy of this message | ||
Note Submitter: vladimir dot ivic at zoho dot com
----
exec is the most pointless command in PDO. Easy target for SQL injection. I have no idea why it
exists at all. To protect yourself from SQL injection you must use prepare and execute. So, I
don't see the point of having an exec command.