PhpOrient
PhpOrient copied to clipboard
How to prevent SQL injection?
As title, how can I prevent SQL injection for this driver? A newer php has removed function like mysql_real_escape_string, so what else can I do to prevent this?
It doesn't look like there are any bind methods, so it is up to you to filter input for anything malicious.
Scott
We are going to support binding in our project spider.It should be easy enough to only use the binder to sanitize your query before sending it through orient. It's not terribly high on my list atm, though.