prepare/execute as protection against injection (MDB2)

[compbry15]

Hey all,

I am creating a website and decided to use MDB2 for my DBAL.

I am right now in the phase of thinking of the measures I will take for security and such. Obviously I would have my own validation and sanity tests, but I was wondering if MDB2 provides protection against SQL injection when using the prepare/execute.

Looking through the code and documentation, it seems like it does, but I would just like a confirmation if anyone knows for sure.

Thanks!

[NogDog]

Confirmed, assuming you are using place-holders for all potentially problematic values in the query.

[compbry15]

Thanks!