---

Safer PHP4 SQL Query Interface

This software is designed to help PHP developers write applications that are free from vulnerability to SQL injection attacks.

The software is licensed under the MIT License. See the source code for the precise terms and conditions.

• MySQL Version
• DBX Version
• Related Links

MySQL Version

Download Version 1.0

Synopsis

• object mysql_execute ( object link_identifier, string query, array args [, long flags])
• string mysql_make_query ( object link_identifier, string query, array args)
• string mysql_quote_arg ( object link_identifier, string arg)

Example Usage

   $link = mysql_connect(...);
   $results = mysql_execute($link,
       "DELETE FROM foo WHERE a = ? AND b = ? AND c = ? AND d = ?",
       array("foo", $b, 5, '5'));
   $real_query = mysql_make_query($link,
       "DELETE FROM foo WHERE a = ? AND b = ? AND c = ? AND d = ?",
       array("foo", "foo\"'\\\x00bar", 5, '5'));
  

DBX Version

Download Version 1.0

Synopsis

• object dbx_execute ( object link_identifier, string query, array args [, long flags])
• string dbx_make_query ( object link_identifier, string query, array args)
• string dbx_quote_arg ( object link_identifier, string arg)

Example Usage

   $link = dbx_connect(...);
   $results = dbx_execute($link,
       "DELETE FROM foo WHERE a = ? AND b = ? AND c = ? AND d = ?",
       array("foo", $b, 5, '5'));
   $real_query = dbx_make_query($link,
       "DELETE FROM foo WHERE a = ? AND b = ? AND c = ? AND d = ?",
       array("foo", "foo\"'\\\x00bar", 5, '5'));
  

Related Links

PHP.net

The PHP homepage

SQL Injection Attacks by Example

An explanation of how SQL injection attacks work.

---

OpenPGP: 19E1 1FE8 B3CF F273 ED17  4A24 928C EC13 39C2 5CF7