简体中文(ZH-CN) English(EN) 繁体中文(ZH-TW) 日本語(JA) 한국어(KO) Melayu(MS) Français(FR) Deutsch(DE)
mysql - If PHP does not use PDO, how to prevent injection when constructing SQL statements?
三叔
三叔 2017-06-22 11:54:34
0
1
848

If PHP does not use PDO, how to prevent injection when constructing SQL statements?

Can formatting strings be eliminated?

三叔
三叔

reply all (1)
我想大声告诉你
我想大声告诉你2017-06-22 11:56:34 1 floor

Can’t.
Be sure to escape special characters such as quotation marks and backtick marks.
Be sure to pay attention to the encoding of the database.
Be sure to filter for special encodings in statements.
pdo uses database parameter binding, so injection is avoided.

Like+0
Add Reply
    Popular Topics
    More>
    Popular Articles
    Popular Tutorials
    More>
    Related Tutorials
    Popular Recommendations
    Latest courses
    Latest Downloads
    More>
    Web Effects
    Website Source Code
    Website Materials
    Front End Template
    About us Disclaimer Sitemap
    php.cn：Public welfare online PHP training，Help PHP learners grow quickly！