Kyle Johnson 6b3a53ec0f Tell PDO to use real prepared statements. ...

This makes sure the statement and the values aren't
parsed by PHP before sending it to the MySQL server.

See https://stackoverflow.com/questions/60174/how-can-i-prevent-sql-injection-in-php
and https://secure.php.net/manual/en/pdo.setattribute.php

2017-02-04 14:59:33 -07:00

11 KiB

Raw Blame History

View Raw