3 ms·
The problem is not which driver you use. It's whether you concatenate strings to form sql queries and then execute them against your database.
by troels 15y ago
The problem is not which driver you use. It's whether you concatenate strings to form sql queries and then execute them against your database.
- JoeCortopassi 15y agoI think the point he was trying to make, was that using prepared statements with PDO or mysqli would prevent this
- rick888 15y agoexactly.