PHP and PDO

[JamesM]

I consider myself to be a pretty basic coder with PHP and although I can do some things quite easily, I've always been worried about the security of the code I produce.

My SQL queries have been pretty basic and although I don't code for a job I am aware that the risk to SQL injection is there with the way I do things.

So I got looked into bind_params and have discovered PDO which seems like a logical step to make.

Just wondered if anybody had any links to any good sites/tutorials in order to have a read?

 

[IntoTheVoid]

Here are a few I found helpful recently:

http://code.tutsplus.com/tutorials/why-you-should-be-using-phps-pdo-for-database-access--net-12059

http://wiki.hashphp.org/PDO_Tutorial_for_MySQL_Developers

I started to use PDO initially as I was fed up with messy looking SQL strings, but soon found prepared statements using PDO with named parameters really neat and user friendly. Also a good defence against SQL injection.

 

[JamesM]

Yeah that's why i'm looking into finding more about it however some of it is going completely over my head!

Thanks for the links, will have a look.

There are so many different functions that can be used which I haven't touched beore