How to change from mysql to pdo using prepared statements in PHP?

$dml = "insert into bookmark(accountId,category,url,hash,title,created) value($_SESSION[accountId],$_POST[category],'$_POST[url]',md5('$_POST[url]'),'$_POST[title]',now())"; mysql_query($dml,$con); 

How to do this using prepared statements in PDO?

+2
source share
2 answers
  $ dml = "INSERT INTO bookmark (accountId, category, url, hash, title, created)"
     .  "VALUES (: accountId,: category,: url, MD5 (: url),: title, NOW ())";
 $ statement = $ pdo-> prepare ($ dml);
 $ parameters = array (
     ": accountId" => $ _SESSION ["accountId"],
     ": category" => $ _POST ["category"],
     ": url" => $ _POST ["url"],
     ": title" => $ _POST ["title"]);
 $ statement-> execute ($ parameters);
+2
source
 $dml = $db->prepare("INSERT INTO bookmark (accountId, category, url, hash, title, created) VALUES (:account_id, :category, :url, MD5(:url), :title, NOW());"); $dml->bindParam(':account_id', $_SESSION['accountId']); $dml->bindParam(':category', $_POST['category']); $dml->bindParam(':url', $_POST['url']); $dml->bindParam(':title', $_POST['title']); $dml->execute(); 
+2
source

Source: https://habr.com/ru/post/1398308/


All Articles