Re: Prep. Statements only in mysql-i? [message #177656 is a reply to message #177653] |
Thu, 12 April 2012 12:17 |
Alexandra Herzog
Messages: 4 Registered: April 2012
Karma:
|
Junior Member |
|
|
> Just out of curiosity, why? Does it not work as it is? I've always
> been of the philosophy "don't fix what's not broke".
Well, I found out that "prepared statements" offer a good way to protect against SQL Injection Attacks. Since the best hackers are those, who do not let you realize that you've been hacked, I figured it's better to use them.
However, prepared statements seem to be unavailable in the old mysql-object. I will have to use mysql-i or PDO. Those are not supported in PHP4, so I had to upgrade to PHP5 first.
However, it was time to upgrade anyway.
Alex
|
|
|