Safety note (bug #47943)

git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@290976 c90b9560-bf6c-de11-be94-00142212c4b1
This commit is contained in:
Jakub Vrana 2009-11-19 10:56:57 +00:00
parent 832ce87fa8
commit 5fb9a3d475

View file

@ -22,6 +22,8 @@
for which real values will be substituted when the statement is executed.
You cannot use both named and question mark parameter markers within the same
SQL statement; pick one or the other parameter style.
Use these parameters to bind any user-input, do not include the user-input
directly in the query.
</para>
<para>
You must include a unique parameter marker for each value you wish to pass