请参阅

• http://dev.mysql.com/tech-resources/articles/4.1/prepared-statements.html


• PDO ::准备


• mysqli ::准备

see

• http://dev.mysql.com/tech-resources/articles/4.1/prepared-statements.html
• PDO::prepare
• mysqli::prepare

您可能还对 http：/ /shiflett.org/articles/sql-injection 和 http： //shiflett.org/blog/2007/sep/the-unexpected-sql-injection