Search:

Would this code be even more safe as it would escape the $_GET variable before the prepare statement is even declared?



<?
require_once('includes/db.php');

if...

Can I close the prepared statement and still use bind_result variables throughout the page like this? Is this a better method than closing on bottom of page?


<?php...

Thank you for reply Michael. So how does this code look to you for secure GET retrieval of a string? Am I using it correctly to receive a single resultset? Also, the PHP page uses several fields...

Title should be "How do I use Prepared Statements for PHP/MySQL SQL Injection Prevention?"

I have a pages setup that seems to work fine, but I want to get some professional feedback as I am a bit of a newb at the prepared statement usage. I have a PHP page that uses several fields from a...