O
O
Optimus2015-12-09 15:11:45
PHP
Optimus, 2015-12-09 15:11:45

Do I need to be wary of quotes in the DB?

PHP+Mysql
Data is added to the database via PDO (named placeholders), when filling in the input field with quotation marks, for example, "Horns and Hooves" LLC, this phrase appears in the database in exactly this form. With this method of working with the database, is it necessary to be wary of quotes and other symbols potentially dangerous for sql?

Answer the question

In order to leave comments, you need to log in

2 answer(s)
S
sunrails, 2015-12-09
Pyan @marrk2

The second item in the list php.net/manual/en/pdo.prepared-statements.php

A
Alexander, 2015-12-09
@aspetek

If you do everything through PDO - there is no danger

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question