Comment Comment by gbba Be careful as this syntax can potentially introduce SQL injections.PHP's parameterization features in PDO can be abstracted so you can turn this into: $vars = array(":userid" => $userid); q("select name from users where id = :userid", $vars); It's still pretty concise and is much safer. parent gbba 5 years ago
PHP's parameterization features in PDO can be abstracted so you can turn this into:
It's still pretty concise and is much safer.