Is this code using PDO secure?

This question already has an answer here:

Are PDO prepared statements sufficient to prevent SQL injection? 7 answers

---

Shoud I use addParam before execution method?

No.

Passing a variable into execute does pretty the same.

There could be other issues though, you can read on them here

链接地址: http://www.djcxy.com/p/93746.html

上一篇: 这个准备语句可以防止SQL注入吗？

下一篇: 此代码是否使用PDO安全？