3 replies to this topic

[dmanjrod]

Ever since i started working with databases, i've been using the mysql_ methods. Someone recently told me that PDO is a better way to do it. How is it better than using the mysql_ functions and do you guys have any good guides that will help me get started using it?

[Alexander]

I've actually written an article on this site roughly a year ago explaining key positive features of using an abstracted database handler (and PHP 5's OO in general for database work), part of my introduction on the matter of issues on mysql_* functions:

Quote

Lets talk about the situation where you used mysql_ functions . The mysql_ function set was introduced in early PHP 4.0 which originates to around July of 2000, the featureset was increased and some basic security precautions were placed into effect, but the function set never changed much more after that. It is fairly archaic.

mysql_real_escape_string() was introduced to aid in preventing SQL injection, even by checking character sets but it is rarely implemented in a proper manner, and with dynamic queries (a query made out of a string) there are just too many places where a malformed data can make a query malicious.

The mysqli_* improved function set is an implementation with basic prepared statements but only available to MySQL and certain versions of PHP, leaving others out of the jump. This is where PDO fits nicely, filling in the gap: PDO allows a uniform set of functions to handle data to the database connection, with prepared statements casting immunity to many of the problems the old functions had.

You can read more about it, along with a kind amount of examples and uses here:

http://forum.codecal...bstraction.html

Certainly feel free to ask if you have any questions!

[dmanjrod]

That's an amazing guide. Exactly what I was looking for. Thank you very much.

[Alexander]

You are certainly welcome, I have in fact written the article as a means of providing a more complete documentation for people wishing to move from standard functions that can be counterproductive or error-prone. Not too many people use PDO that come on here.

When I have time I will improve the article, I've been meaning to add more to it.