A secure PHP class connecting to MySQL?

Question

Can someone recommend some simple and secure PHP/MySQL Database class for the database interaction?

What doesn't PDO do that you want the class to do?

Yacoby
– Yacoby

2011-03-04 16:03:18 +00:00
Commented Mar 4, 2011 at 16:03 — Yacoby
– Yacoby, Commented Mar 4, 2011 at 16:03

Jim · Accepted Answer · 2011-03-04 16:10:29Z

1

You could also just use the mysqli class :)

answered Mar 4, 2011 at 16:10

Jim

18.9k5 gold badges51 silver badges66 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

tsadiq · Accepted Answer · 2011-03-04 16:08:22Z

1

Here at work we use PDO for that kind of things. Clear enough imho

http://www.php.net/manual/en/intro.pdo.php

answered Mar 4, 2011 at 16:08

tsadiq

4124 silver badges9 bronze badges

Comments

Brandon Frohbieter · Accepted Answer · 2011-03-04 16:03:45Z

0

Check out MDB2....

http://pear.php.net/package/MDB2

answered Mar 4, 2011 at 16:03

Brandon Frohbieter

18.2k4 gold badges42 silver badges62 bronze badges

Comments

ItalyPaleAle · Accepted Answer · 2011-03-04 16:59:59Z

0

All extensions (mysql, mysqli, pdo_mysql) are safe, if you use them correctly!

We use PDO, though, which appears to be the easiest one: http://php.net/manual/en/book.pdo.php Just remember to use prepared statements (which are "100% safe" against SQL Injections, when used correctly). If you can't use them, at least use methods like PDO::quote().

answered Mar 4, 2011 at 16:59

ItalyPaleAle

7,3506 gold badges49 silver badges74 bronze badges

2 Comments

Marc B Over a year ago

If used correctly, $res = exec('echo \'select * from ...\'|mysql -u -pblahblah dbname'); would be safe as well. Preferable? heck no...

Explosion Pills Over a year ago

Prepared statements are not "100% safe" against injections. It's hard to say what "used correctly" means. Basically, you have to be careful no matter what you are doing, prepared statements or no.

Collectives™ on Stack Overflow

A secure PHP class connecting to MySQL?

4 Answers 4

Comments

Comments

Comments

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

Comments

Comments

Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related