PEAR Security
| From: | Aaron Zampaglione | Date: | Sat, 14 Oct 2006 18:22:40 +0000 |
| Subject: | PEAR Security | ||
| Groups: | php.pear.general | ||
| Request: | Send a blank email to pear-general+get-25440@lists.php.net to get a copy of this message | ||
Hello, I am relatively new to the php programming world and I have a
question about PEAR.
Does PEAR make my db queries more secure, or is it just a class to make
queries more "organized and easier".
As in what would be the difference (security level wise) between just doing
this:
(Supposing I striped slashes, escaped strings etc. already.)
(Already connected through regular mysql commands)
------------------------------------------
$sql = "SELECT * FROM USERS"
$query = mysql_query($sql);
------------------------------------------
As opposed to:
(Already connected through PEAR procedure)
------------------------------------------
$sql = "SELECT * FROM USERS"
$query = $db->query($sql);
----------------------------------------
Thanks in advance for your time.