Timeline for Query Builder for Mysql Extension
Current License: CC BY-SA 3.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 2, 2016 at 20:32 | comment | added | tereško | That's why by default PDO was set to emulate prepared statements for the MySQL driver. This emulation has to be turned off, because otherwise your code can becomes vulnerable to SQL injections. Especially when connection does not have a defined charset. For full details, please review this article: wiki.hashphp.org/PDO_Tutorial_for_MySQL_Developers (it will explain how to disable emulation, define charset and enable exception based error reporting) | |
| Apr 2, 2016 at 20:29 | comment | added | tereško |
There is a design flaw in PDO's driver for MySQL. The support for PREPARE queries in MySQL was added only in 5.0 versions (released in 2003). The adoption rate was slow, which mean that when PHP 5.1 was released (version that added PDO) there still was huge percentage of MySQL 4.x servers out there.
|
|
| Mar 25, 2016 at 13:27 | vote | accept | Zaki Sulistya | ||
| Mar 25, 2016 at 13:27 | vote | accept | Zaki Sulistya | ||
| Mar 25, 2016 at 13:27 | |||||
| Mar 25, 2016 at 13:27 | comment | added | Zaki Sulistya | i think your word is amazing, i'm very proud of you. i'm not felt sad because your word. can you explain where is the vulnerable? and do you have social media like facebook maybe(not twitter)? i need to make conversation with you | |
| Mar 25, 2016 at 13:18 | history | answered | tereško | CC BY-SA 3.0 |