News for hackers. Stuff that matters.

A comment on PHP the Wrong Way. Parent comment

Re:PHP the Wrong Way by CiPHPerCoder on Friday August 19, 2016 @10:07AM (#12320081)
No, you use

  $pdo->prepare("SELECT id FROM foo WHERE bar = ? AND baz = ?")
      ->execute([$baz, $qux]);
...while taking care to set PDO::ATTR_MODE to PDO::ERRMODE_EXCEPTION and PDO::ATTR_EMULATE_PREPARES to false when your PDO object is initialized.

https://github.com/paragonie/airship/blob/8b7edde11b5b57fcb4...

See also: http://stackoverflow.com/a/12118602/2224584

[ Parent | on HN ]
Re:PHP the Wrong Way by roblabla on Friday August 19, 2016 @11:22AM (#12320650)
This is the problem I have with PHP. 15 ways to do something seemingly simple, and only one obscure way is correct (What's PDO::ATTR_MODE ?) And why does PDO try to emulate prepares ?
[ Parent | on HN ]
Re:PHP the Wrong Way by stephenr on Friday August 19, 2016 @12:17PM (#12321135)
That was 4 ways. The documentation identify what the options do.
[ Parent | on HN ]
Re:PHP the Wrong Way by stephenr on Friday August 19, 2016 @12:16PM (#12321120)
Named parameters are much simpler to use IMO.
[ Parent | on HN ]
Re:PHP the Wrong Way by CiPHPerCoder on Friday August 19, 2016 @12:27PM (#12321224)
Simpler? No. Easier? Yes.
[ Parent | on HN ]