Shulou(Shulou.com)06/01 Report--

MYSQL Server doesn't have the concept of shared pools (I don't know what shared pools are), so the biggest benefit of using bound variables on MYSQL is to prevent SQL injection.

PHP example:

$stmt = $dbh -> prepare("SELECT * FROM users WHERE username=? AND password=？");

$stmt -> execute(array($username,$password));

Even if the variable passed in has the condition "angel ' or 1= 1'," the single quote in the input parameter is escaped normally due to the binding variable, resulting in the subsequent "or 1=1" appearing as a username condition, rather than the condition of the entire SQL statement, i.e."angel \' or 1=1\'."

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.