PHPize Online / SQLize Online  /  SQLtest Online

A A A
Share      Blog   Popular
Copy Format Clear
Copy Clear
Copy Format Clear
<?php $pdo->query("create table users (id int, name varchar(100))"); $pdo->query("insert into users (id,name) values (1,'Bobby Tables')"); $id = "id;drop table users"; echo "Prepares are safe:\n"; $stmt = $pdo->prepare("select name from users where id=?"); $stmt->execute([$id]); echo $pdo->query("select name from users")->fetchColumn(),"\n\n"; echo "And here goes escaping:\n"; $id = mysqli_real_escape_string($mysqli, $id); $stmt = $pdo->query("select name from users where id=$id"); echo $pdo->query("select name from users")->fetchColumn(),"\n";
Show:  
Copy Clear
Like the site? Share it!
Have a questions? Ask in our telegram chat!
© 2024 PHPize - format run and share PHP code with SQL queries online | About project | Disclaimer
PHP versions: PHP 5.6, PHP 7.4, PHP 8.0, PHP 8.1, PHP 8.2.13
RDBMS versions: MariaDB 11.4, MariaDB 11.5, MariaDB 10, MariaDB 10 Sakila (ReadOnly), MySQL 5.7, MySQL 5.7 Sakila (ReadOnly), MySQL 8.0, MySQL 8.0 Sakila (ReadOnly), SQLite 3, PostgreSQL 10 Bookings (ReadOnly), PostgreSQL 11, PostgreSQL 12, PostgreSQL 13, PostgreSQL 14, PostgreSQL 15, MS SQL Server 2017, MS SQL Server 2019, MS SQL Server 2022, MS SQL Server 2022 AdventureWorks (ReadOnly), Firebird 4.0, Firebird 4.0 (Employee), Oracle Database 19c (HR), Oracle Database 21c, Oracle Database 23c Free, SOQOL