4 ms·A Novel Technique for SQL Injection in PDO's Prepared Statements1 points by donatj 1y ago1oooqooq 1y agoonly if you're inserting user strings into the statement. meh.