4 ms·
Actually, isn't the escaping done serversiden when using placeholders? At least in Perl, there's no need to escape placeholder values explicitly. I believe the
by gizzlon 15y ago
Actually, isn't the escaping done serversiden when using placeholders?
At least in Perl, there's no need to escape placeholder values explicitly. I believe the prepared statement is stored on the server, and then the values sent later. Of course the escaping could be the work of the driver.. anyone know?
- rjh29 15y agoSee "Prepared Statement Support" from http://search.cpan.org/perldoc?DBD::mysql#Class_Methods http://search.cpan.org/perldoc?DBD::mysql#Class_Methods Prepared statements are disabled by default and require MySQL >= 4.1.3. Instead, the driver does the placeholder replacement on the client, and prepare() does nothing clever at all.
- gizzlon 15y agohm.. could be useful information.. thanks