3 ms·

How does this protect against SQL injection attacks?

• ksri 10y ago
  It doesn't append the strings blindly. Any variables are automatically replaced by placeholder strings. You also get an array of bind parameters. You then use your database library to bind the parameters into the placeholders.