4 ms·

PDO is pretty straightforward: $s = $dbc->prepare("SELECT * FROM table WHERE field = :foo"); $s->bindValue(':foo', $_GET['foo']); $r = $s->execute(); But all

by hannob 5y ago

PDO is pretty straightforward: $s = $dbc->prepare("SELECT * FROM table WHERE field = :foo"); $s->bindValue(':foo', $_GET['foo']); $r = $s->execute(); But all of that of course doesn't help if people don't use it.