Home/ Questions/Q 7593721
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-30T21:14:23+00:00

Do I still need to use mysql_escape_string to avoid SQL Injection attacks if I

  • 0

Do I still need to use mysql_escape_string to avoid SQL Injection attacks if I am using prepared statements in MySQL 5.3?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    PDO should take care of the escaping/sanitizing for you. Assuming you mean:

    $db->prepare('SELECT * FROM table WHERE foo = ?');
$db->execute(Array("bar's baz"));
    • 0