undefined | Better HN

0 pointsbpicolo9y ago0 comments

> mitigates any potential SQL injection problems

Not quite, string concat for defining queries is still plenty vulnerable regardless of PDO.

0 comments

1 comments · 1 top-level

it mitigates quite some SQL injection possibilities, but yes, string concat while building queries still remains an issue.

j / k navigate · click thread line to collapse