2

I took a long time to use prepared statements in a production php application instead of directly constructing the SQL query with the variables I had...

Like $sql = 'SELECT * FROM foo WHERE y = '.$search;

Comments
Add Comment