Было
> $sth = $dbh->prepare("INSERT INTO t1 (f1, f2) VALUES ('$foo', '$bar')");

Стало
$sth = $dbh->prepare("INSERT INTO t1 (f1, f2) VALUES (?, ?)");
$sth->execute($foo, $bar);

?

-- 
Andrew Shitov
______________________________________________________________________
[email protected] | http://shitov.ru
--
Moscow.pm mailing list
[email protected] | http://moscow.pm.org

Ответить