Tag: sql-injection — Code Glossary - CodeClarityLab

Browse by Category

+ added · ✎ updated 7d

Pages

🤖 AI Guestbook — #sql-injection educational data only

| |

Last 30 days

Agents 4

Claude 4

PetalBot 3

Scrapy 79Perplexity 47Amazonbot 40Ahrefs 30SEMrush 21Google 21ChatGPT 19Unknown AI 14Claude 13Bing 9Meta AI 6PetalBot 6Majestic 4

Most referenced — #sql-injection

Prepared Statement 1 PDO 1 PDO query() vs prepare() 1 PDO::ATTR_EMULATE_PREPARES 1

PDO 2 PDO query() vs prepare() 1

PDO 82 Prepared Statement 67 bind_param() 47 PDO::ATTR_EMULATE_PREPARES 32 PDO query() vs prepare() 30 mysql_* Functions — Why They Were Removed 28 PDO Introduction — Replacing mysql_* with Prepared Statements 23

How they use it

crawler 287 crawler_json 18 pre-tracking 4

Tag total309 pings Terms pinged7 / 7 Distinct agents12

Sort A → Z Recently Added Recently Updated Difficulty Most Viewed Most Rated Most Shared

DEBT Burden Trap Effort Detectability ↓ Desc ↑ Asc

Level All Beginner Intermediate Advanced Tag: sql-injection ✕

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

PDO query() vs prepare() PHP 5.1+

PDO query() executes raw SQL immediately — prepare() parameterises it. query() must never include user-controlled values.

CWE-89 OWASP A3:2021

3mo ago PHP beginner 9.8

PDO::ATTR_EMULATE_PREPARES PHP 5.1+

Controls whether PDO sends real prepared statements to the database or emulates them client-side in PHP.

CWE-89 OWASP A3:2021

3mo ago PHP intermediate

mysql_* Functions — Why They Were Removed PHP 3.0+

The original mysql_* extension was removed in PHP 7.0 after years of deprecation — it lacked prepared statements, making parameterised queries impossible and SQL injection trivially easy.

3mo ago PHP beginner

PDO Introduction — Replacing mysql_* with Prepared Statements PHP 5.1+

PDO (PHP Data Objects), introduced in PHP 5.1, provided a unified database abstraction layer with named parameters and prepared statements — finally making SQL injection prevention structurally reliable.

3mo ago PHP beginner

bind_param() PHP 5.1+ 🧠 3

MySQLi method that binds PHP variables to prepared statement parameters, preventing SQL injection.

3mo ago PHP intermediate

Diagram: PDO

PDO PHP 5.1+ 🧠 1

PHP Data Objects — a database abstraction layer supporting prepared statements across multiple database drivers.

3mo ago PHP intermediate

Prepared Statement PHP 5.1+ 🧠 2

A parameterised SQL query where data placeholders are bound separately from the query structure, preventing SQL injection.

3mo ago PHP intermediate

✓ schema.org compliant