thanks guys, i'll still need to use sql statements in a prepared manner though.
by the way, is there any way to change the way to bind parameters by index then?
etc :
$stmt->bind_param("s", $param1);
maybe like..
$stmt->bind_param(0, $param1, "s");
$stmt->bind_param(1, $param2, "s");
$stmt->bind_param(2, $param3, "i");
reason being is that if we had too much parameters at one go..wouldn't it look something like this ?
$stmt->bind_param("ssssssssssssdissssssssssssidddddd", $param1, $param2, ..........................);