bind_param()有什么作用? [英] What does bind_param() do?

问题描述

$resultSpendStmt = $connection->prepare(...);
$array->bind_param("sdidi", $A, $B, $C, $D, $E);
$array->execute();
$array->store_result();
$array->bind_result($F, $G, $H, $I, $J, $K);

我仍然不确定bind_param的功能.有人可以举一个例子说明我的意思吗?

I am still a little unsure what bind_param does. Can someone give me an example as to what is means?

推荐答案

在准备SQL语句时，可以在将要插入列值的位置插入占位符(?)，然后使用bind_param()到安全地用该占位符代替实际列的值.这样可以防止SQL注入的任何可能性.

When you prepare an SQL statement, you can insert a placeholder (?) where a column value would go, then use bind_param() to safely substitute that placeholder for the real column's value. This prevents any possibility of an SQL injection.

您可以在此处详细了解bind_param().

这篇关于bind_param()有什么作用?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！