Variable binding in PHP ADOdb

Question

Does ADOdb do data sanitation or escaping within the same functionality by default? Or am I just confusing it with Code Igniter's built-in processes?

Does binding variables to parameters in ADOdb for PHP prevent SQL injection in any way?

score 4 · Answer 1 · edited Aug 02 '13 at 09:51

4

yes, you pass the array of parameters.

$rs = $db->Execute('select * from table where val=?', array('10'));

Rest of their docs can be found here:

edited Aug 02 '13 at 09:51

daniel__

answered Sep 16 '08 at 20:21

score 2 · Accepted Answer · answered Sep 16 '08 at 20:23

2

Correct - bound parameters are not vulnerable to SQL injection attacks.

answered Sep 16 '08 at 20:23

Peter Bailey

2 Answers2