MySQL Forums
Forum List  »  PHP

Re: PHP call Stored Proc with parameters returning recordset
Posted by: Peter Brawley
Date: May 10, 2015 06:06PM

SQL Server and MySQL best practices differ in many respects.

MySQL sprocs offer little protection against SQL injection.

To protexct against SQL injection under MySQL & PHP, see "prevent SQL injection attacks" at http://www.artfulsoftware.com/infotree/mysqltips.php.

Options: ReplyQuote




Sorry, you can't reply to this topic. It has been closed.

Content reproduced on this site is the property of the respective copyright holders. It is not reviewed in advance by Oracle and does not necessarily represent the opinion of Oracle or any other party.