New answers tagged


The PDO::quote() function is not correct for making column names safe. It's basically a wrapper for the QUOTE() function in MySQL: The string is returned enclosed by single quotation marks and with each instance of backslash (), single quote ('), ASCII NUL, and Control+Z preceded by a backslash. If the argument is NULL, the return value is the word “NULL” ...

Top 50 recent answers are included