Posted by Toby Inkster on 08/23/06 06:33

Ignoramus20689 wrote:

> I hope that my post is not wrongly misinterpreted as an attack on php,
> as same mistakes are done with perl as well. (though use of
> pre-prepared statements could help in the case of perl, but dumb
> programmers would not be likely to use that feature).

PHP does support prepared statements, but not in the MySQL module. It's in
the "mysqli" (MySQL Improved) module, PostgreSQL, and a handful of other
database modules though.

Also, the PDO module (Portable Data Objects -- think DBI for PHP) supports
prepared statements, and even emulates them for databases that don't
natively support them.

--
Toby A Inkster BSc (Hons) ARCS
Contact Me ~ http://tobyinkster.co.uk/contact

• Next in forum: PDF in PHP
• Prev in forum: Re: Is this a security issue
• Thread view: Re: Is this a security issue

[Reply to this message]