Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #5470

Re: Prep. Statements only in mysql-i?

Followups directed to: comp.lang.php

Show all headers | View raw

Alexandra Herzog wrote:

> I would like to change my homepage (php5, mysql) to use 'prepared
> statements'.
> 
> Should I use the mysql-i object?

Yes, unless PDO is or can be made available.

> Or do 'prepared statements' also exist in the normal, plain old mysql
> object, which I know from php4 ?

No.  RTFM: <http://php.net/manual/en/set.mysqlinfo.php>

> PDO seems to offer only database independance,

PDO offers much more, including an convenient API for prepared statements 
and transactions.  RTFM: <http://php.net/manual/en/intro.pdo.php>

Between mysqli and PDO, I have decided in favor of PDO primarily because on 
top of several database drivers, PDOStatement::execute() allows to pass 
parameters as an associative array without binding values to variables 
first.  Therefore, I have found PDO's to be a very suitable, sufficiently 
flexible API for use in MVC-based frameworks, including mine.  AFAIK, Zend 
Framework uses PDO by default, too.

> but my hoster only offers mysql

Tough luck.

> and I don't intend to change that in the future (it's just a small
> homepage).

You will have to make a change if you want to use prepared statements and 
thereby gain a minimum of Web application security.

BTW, there is also de.comp.lang.php, which (also?) has a FAQ.


PointedEars
-- 
Prototype.js was written by people who don't know javascript for people
who don't know javascript. People who don't know javascript are not
the best source of advice on designing systems that use javascript.
  -- Richard Cornford, cljs, <f806at$ail$1$8300dec7@news.demon.co.uk>

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Prep. Statements only in mysql-i? Alexandra Herzog <herzog.alex@arcor.de> - 2012-04-11 22:42 +0000
  Re: Prep. Statements only in mysql-i? Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2012-04-12 01:16 +0200
    Re: Prep. Statements only in mysql-i? Alexandra Herzog <herzog.alex@arcor.de> - 2012-04-12 11:29 +0200
      Re: Prep. Statements only in mysql-i? Michael Fesser <netizen@gmx.de> - 2012-04-12 17:14 +0200
      Re: Prep. Statements only in mysql-i? Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2012-04-14 08:21 +0200
  Re: Prep. Statements only in mysql-i? "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-04-12 12:33 +0200
    Re: Prep. Statements only in mysql-i? Jerry Stuckle <jstucklex@attglobal.net> - 2012-04-12 07:51 -0400
      Re: Prep. Statements only in mysql-i? "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-04-12 17:22 +0200
        Re: Prep. Statements only in mysql-i? Jerry Stuckle <jstucklex@attglobal.net> - 2012-04-12 13:16 -0400
          Re: Prep. Statements only in mysql-i? "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-04-12 19:28 +0200
            Re: Prep. Statements only in mysql-i? Jerry Stuckle <jstucklex@attglobal.net> - 2012-04-12 14:08 -0400
              Re: Prep. Statements only in mysql-i? "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-04-12 20:23 +0200
                Re: Prep. Statements only in mysql-i? Jerry Stuckle <jstucklex@attglobal.net> - 2012-04-12 16:34 -0400
            Re: Prep. Statements only in mysql-i? "Peter H. Coffin" <hellsop@ninehells.com> - 2012-04-12 13:29 -0500
      Re: Prep. Statements only in mysql-i? Adam Harvey <adam@adamharvey.name> - 2012-04-13 08:06 +0000
  Re: Prep. Statements only in mysql-i? Jerry Stuckle <jstucklex@attglobal.net> - 2012-04-12 07:53 -0400
    Re: Prep. Statements only in mysql-i? Alexandra Herzog <herzog.alex@arcor.de>> - 2012-04-12 14:17 +0200
      Re: Prep. Statements only in mysql-i? Jerry Stuckle <jstucklex@attglobal.net> - 2012-04-12 09:21 -0400

csiph-web