Edit
by Ghulam Jafar - 9 years ago (2015-11-11)
I want DB layer that have SQL Injection safe structure
| I need DB class for my application that should SQL injection safe. |
Ask clarification
1 Recommendation
This class can execute MySQL queries using prepared statements.
It can connect to a given MySQL database using the MySQLi extension.
The class can execute plain SQL queries or queries with parameters using prepared statements to pass the parameter values.
The parameter values are passed along the SQL query string in a single call as an array that defines either the parameter value and its type.
Queries that retrieve result sets return the results as arrays. The range of result set rows to be returned can be limited.
| by Dave Smith 7620 - 9 years ago (2015-11-11) Comment
The current recommendation is to use prepared statements which this class can help manage for you. |