Comment Comment by bpicolo Yep. PDO still leaves room for string concatenation issues. Unfortunately, so does Doctrine. parent bpicolo 11 years ago