Comments on: Converting your PHP app to MySQLi prepared statements

By: vanderaj

vanderaj — Sun, 31 Jan 2010 03:02:48 +0000

MySQLi’s fetch_array only works with results from the dangerous, unsafe at any speed, shoot yourself always mysqli_query(). Something we should all be avoiding.

It does *not* work for prepared statements. That’s why there’s workarounds like this:
http://php.net/manual/en/mysqli-stmt.fetch.php#82742

By: Pons

Pons — Fri, 29 Jan 2010 09:21:05 +0000

fetch array exists:
http://www.php.net/manual/en/mysqli-result.fetch-array.php

By: Notable Tech Posts – 2010.01.10 | The Life of Lew Ayotte

Notable Tech Posts – 2010.01.10 | The Life of Lew Ayotte — Mon, 11 Jan 2010 03:06:40 +0000

[...] Converting your PHP app to MySQLi prepared statements [...]

By: Ivan Zahariev

Ivan Zahariev — Tue, 05 Jan 2010 13:22:02 +0000

I myself tend to always use MySQL prepared statements because of the security they provide against SQL injections. Note however, that before MySQL 5.1.17, prepared statements do not use the query cache (http://dev.mysql.com/doc/refman/5.1/en/query-cache-operation.html).

PDO is another good alternative for PHP+prepared statements (http://php.net/manual/en/book.pdo.php).

By: Greebo.net: Converting your PHP app to MySQLi prepared statements | Webs Developer

Mon, 04 Jan 2010 20:01:19 +0000

[...] Greebo.net there’s a recent post that looks at converting the current database functionality in your application over to the MySQLi [...]

By: Hari K T

Hari K T — Mon, 04 Jan 2010 06:33:38 +0000

I think many of the sites are already running in PHP5. I have also found some are still sticking on PHP4 , may be because they don’t worry about security .

You can use mysqli_fetch_assoc .

By: John Rockefeller

John Rockefeller — Mon, 04 Jan 2010 05:32:49 +0000

Great article. I’m looking forward to the next one about PDO. It’s surprising how many websites are not XSS or injection secure

By: abcphp.com

abcphp.com — Mon, 04 Jan 2010 04:42:15 +0000

Converting your PHP app to MySQLi prepared statements | cat slave diary…

Okay, you’ve got like a zillion SQL queries in your PHP app, and probably 95% of them have a WHERE clause, and you need to make them safe so people will still download and use your app. Because if you don’t fix your injection issues, I will rain fire o…