Php security programming-SQL injection attacks

Real realpreparedstatements is not used by default when PDO is used to access the MySQL database. To solve this problem, you must disable the simulation effect of preparedstatements. The following is an example of using PDO to create a link :? Php $ dbhnewPDO (mysql: dbnamemydb; host127.0.0.1; charsetutf8, roo

Real prepared statements is not used by default when PDO is used to access the MySQL database. To solve this problem, you must disable the simulation effect of prepared statements. The following is an example of using PDO to create a link :? Php $ dbh = new PDO (mysql: dbname = mydb; host = 127.0.0.1; charset = utf8, roo

Real prepared statements is not used by default when PDO is used to access the MySQL database. To solve this problem, you must disable the simulation effect of prepared statements. The following is an example of using PDO to create a link:

  SetAttribute (PDO: ATTR_EMULATE_PREPARES, false);?>

This ensures that SQL statements and their values are not parsed by PHP before being passed to the mysql server (all possible malicious SQL injection attacks are prohibited)