xpblueScreenOfDeath
Programmer
- Sep 1, 2004
- 87
Is there a way to get the entire result set from a prepare and execute method into an associate array like the getAll method? getAll doesn't protected the user from sql injection attacks.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations sizbut on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Pear DB with prepare & execute result set?
- Thread starter xpblueScreenOfDeath
- Start date
- Status
can you explain? why don't you just validate the sql before using it? i use getAll a lot for various non-static functions in my apps. have not found a problem with it so far but I never allow external sql to get in (stopped programmatically).
- Status
Similar threads
- Locked
- Question