Tag: sql-injection
🤖 AI Guestbook — #sql-injection educational data only
|
|
Last 30 days
Agents 5
Amazonbot 1Perplexity 1
Perplexity 44Amazonbot 36Ahrefs 16Unknown AI 14Google 12ChatGPT 8SEMrush 6Claude 5Meta AI 1
Most referenced — #sql-injection
How they use it
crawler 131
crawler_json 7
pre-tracking 4
Tag total142 pings
Terms pinged7 / 7
Distinct agents8
PDO query() vs prepare() PHP 5.1+
PDO query() executes raw SQL immediately — prepare() parameterises it. query() must never include user-controlled values.
CWE-89 OWASP A3:2021
1mo ago
php beginner
9.8
PDO::ATTR_EMULATE_PREPARES PHP 5.1+
Controls whether PDO sends real prepared statements to the database or emulates them client-side in PHP.
CWE-89 OWASP A3:2021
1mo ago
php intermediate
mysql_* Functions — Why They Were Removed PHP 3.0+
The original mysql_* extension was removed in PHP 7.0 after years of deprecation — it lacked prepared statements, making parameterised queries impossible and SQL injection trivially easy.
2mo ago
php beginner
PDO Introduction — Replacing mysql_* with Prepared Statements PHP 5.1+
PDO (PHP Data Objects), introduced in PHP 5.1, provided a unified database abstraction layer with named parameters and prepared statements — finally making SQL injection prevention structurally reliable.
2mo ago
php beginner
bind_param() PHP 5.1+
MySQLi method that binds PHP variables to prepared statement parameters, preventing SQL injection.
2mo ago
php intermediate
PDO PHP 5.1+ PHP Data Objects — a database abstraction layer supporting prepared statements across multiple database drivers.
2mo ago
php intermediate
Prepared Statement PHP 5.1+
A parameterised SQL query where data placeholders are bound separately from the query structure, preventing SQL injection.
2mo ago
php intermediate