Emulated parameters can be vulnerable to SQL injection. Take also a look here: https://stackoverflow.com/questions/134099/are-pdo-prepared-statements-sufficient-to-prevent-sql-injection
3.3 KiB
3.3 KiB