PHP freak wrote:

Looking at this page:
http://us2.php.net/manual/en/function.mysqli-prepare.php

Also the new book "ADVANCED PHP PROGRAMMING" uses the new MySQLi Prepared Statements for all queries.

Wondering if that extra code, trouble, and lack of flexibility is worth it? Will it be a HUGE performance increase that will be worth those added lines of code for every single query?

I don't know if the queries are compiled when you prepare them or not, but if they are, that could be a large performance increase.


Also, I believe the point to prepared statements is for security. The parameters you "bind" to the query will be escaped and validated (?) to be the correct type.

Can anyone back this up?

--
---John Holmes...

Amazon Wishlist: www.amazon.com/o/registry/3BEXC84AB3A5E/

php|architect: The Magazine for PHP Professionals – www.phparch.com

--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Reply via email to