PDO provides a data-access abstraction layer, which means that, regardless of which database you’re using, you use the same functions to issue queries and fetch data.<\/p>\n
\/\/ Persistent Connections Prepared Statements :<\/strong> \/\/ insert one row \/\/ repeated inserts \/\/ fetching data PDO vs mysqli :<\/strong> PDO works with several databases whereas MySQLi works with MySQL only. <\/p>\n PDO has named parameters whereas MySQLi does not. $mysqli->prepare(‘SELECT * FROM users WHERE username = ? AND email = ?’); http:\/\/code.tutsplus.com\/tutorials\/pdo-vs-mysqli-which-should-you-use–net-24059<\/a><\/p>\n","protected":false},"excerpt":{"rendered":" PDO provides a data-access abstraction layer, which means that, regardless of which database you’re using, you use the same functions to issue queries and fetch data. try { $dbh = new PDO(‘mysql:host=localhost;dbname=test’, $user, $pass); foreach($dbh->query(‘SELECT * from FOO’) as $row) { print_r($row); } $dbh = null; } catch (PDOException $e) { print “Error!: ” . … Continue reading PHP Data Objects & Prepared Statements<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"class_list":["post-339","post","type-post","status-publish","format-standard","hentry","category-php"],"_links":{"self":[{"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=\/wp\/v2\/posts\/339","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=339"}],"version-history":[{"count":9,"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=\/wp\/v2\/posts\/339\/revisions"}],"predecessor-version":[{"id":341,"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=\/wp\/v2\/posts\/339\/revisions\/341"}],"wp:attachment":[{"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=339"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=339"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.tech.dimprash.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=339"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}try {
\n $dbh = new PDO('mysql:host=localhost;dbname=test', $user, $pass);
\n foreach($dbh->query('SELECT * from FOO') as $row) {
\n print_r($row);
\n }
\n $dbh = null;
\n} catch (PDOException $e) {
\n print \"Error!: \" . $e->getMessage() . \"
\";
\n die();
\n}<\/p>\n
\n true
\n));
\n?><\/code><\/p>\n
\n They can be thought of as a kind of compiled template for the SQL that an application wants to run, that can be customized using variable parameters. Prepared statements offer two major benefits:
\na) The query only needs to be parsed (or prepared) once, but can be executed multiple times with the same or different parameters.
\nb) The parameters to prepared statements don’t need to be quoted; the driver automatically handles this. If an application exclusively uses prepared statements, the developer can be sure that no SQL injection will occur <\/p>\n$stmt = $dbh->prepare(\"INSERT INTO REGISTRY (name, value) VALUES (:name, :value)\");
\n$stmt->bindParam(':name', $name);
\n$stmt->bindParam(':value', $value);<\/p>\n
\n$name = 'one';
\n$value = 1;
\n$stmt->execute();<\/code><\/p>\n
\n$stmt = $dbh->prepare(\"INSERT INTO REGISTRY (name, value) VALUES (?, ?)\");
\n$stmt->bindParam(1, $name);
\n$stmt->bindParam(2, $value);<\/code><\/p>\n
\n$stmt = $dbh->prepare(\"SELECT * FROM REGISTRY where name = ?\");
\nif ($stmt->execute(array($_GET['name']))) {
\n while ($row = $stmt->fetch()) {
\n print_r($row);
\n }
\n}<\/code><\/p>\n
\nWhile PDO has its advantages, such as a clean, simple, portable API, its main disadvantage is that it doesn’t allow you to use all of the advanced features that are available in the latest versions of MySQL server. For example, PDO does not allow you to use MySQL’s support for Multiple Statements.<\/p>\n
\n$pdo->prepare(‘SELECT * FROM users WHERE username = :username AND email = :email’);
\n$params = array(‘:username’ => ‘test’, ‘:email’ => $mail);<\/p>\n
\n$query->bind_param(‘test’, $mail);<\/p>\n