[RESOLVED] PDO Security Question

[Nvenom]

Howdy

Basically i have not been able to find anything stating otherwise that

$sth->execute(array($var1, $var2)); 

Executing with the parameters included is equal to

$sth->bindParam(1, $var1, PDO::PARAM_INT);
$sth->bindParam(2, $var2, PDO::PARAM_STR, 12);
$sth->execute(); 

Executing with the parameters defined in bindParam() Security wise.

Using bindParam seems more secure to me because it defines the data type.. (like PDO::PARAM_INT)

Can anyone Clarify if either is superior to the other in security, Please and Thanks

[NogDog]

I don't think it makes a difference security-wise (SQL injection will be prevented in either case), though it may help prevent/detect programming errors.

[Nvenom]

Okay, Thanks for the reply