Re: mysqli - using PREPARED STATEMENTS - worth it?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



PHP freak wrote:

Looking at this page:
http://us2.php.net/manual/en/function.mysqli-prepare.php

Also the new book "ADVANCED PHP PROGRAMMING" uses the new MySQLi Prepared Statements for all queries.

Wondering if that extra code, trouble, and lack of flexibility is worth it? Will it be a HUGE performance increase that will be worth those added lines of code for every single query?

I don't know if the queries are compiled when you prepare them or not, but if they are, that could be a large performance increase.


Also, I believe the point to prepared statements is for security. The parameters you "bind" to the query will be escaped and validated (?) to be the correct type.

Can anyone back this up?

--
---John Holmes...

Amazon Wishlist: www.amazon.com/o/registry/3BEXC84AB3A5E/

php|architect: The Magazine for PHP Professionals – www.phparch.com

--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [PHP Users]     [Postgresql Discussion]     [Kernel Newbies]     [Postgresql]     [Yosemite News]

  Powered by Linux