[Vtigercrm-developers] Question about Coding Guidelines

[Rietz, Artur]

I have question about your ideas connected to mysql queries:

Parameterised queries
>
> Use this API to overcome SQL Injection attacks
>
 $db = PearDatabase::getInstance();
>
> $rs  = $db->pquery("SELECT * FROM tablename WHERE id=?", array($id));
>
>
Is using pquery more secure than normal query function ? ( If it is, then I
have to ask : why ? )

Regards, Rietz Artur
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.vtigercrm.com/pipermail/vtigercrm-developers/attachments/20130318/0b2b6960/attachment.html>