Re: [PHP-DB] Re: SQL injection & prepared statements

2004-06-25 Thread Gerard Samuel
On Friday 25 June 2004 01:03 pm, Hans_L wrote: > Gerard Samuel wrote: > > > > So Im guessing that this is how "prepared" statements are done on other > > databases. > > > > After being trained to do it one way (always escaping "bad" content), Im > > being shown to do it the other way, and Im looki

[PHP-DB] Re: SQL injection & prepared statements

2004-06-25 Thread Hans_L
Gerard Samuel wrote: So Im guessing that this is how "prepared" statements are done on other databases. After being trained to do it one way (always escaping "bad" content), Im being shown to do it the other way, and Im looking for any suggestions you may have. Yes, the idea with prepared stat