Cannot determine if this code is prone to SQL injection
255
How can I prevent SQL injection in PHP?
84077
Warning: PDOStatement::execute(): SQLSTATE[HY093]: Invalid parameter number: number of bound variables does not match number of tokens in
24958
Getting raw SQL query string from PDO prepared statements
23569
weird - mysql's sql::SQLException is not caught by its type, but is caught as std::exception and cast back successfully
135203
can this code be shortened or improved?
1017
Is MySql's LAST_INSERT_ID() function guaranteed to be correct?
139049
PDO SQL-state "00000" but still error?
90507
Parameter Sniffing (or Spoofing) in SQL Server
1831
Can PHP PDO Statements accept the table or column name as parameter?
94931
Mysql_real_escape_string() Warning Confusion
95323
Is there an equivalent of PHP's mysql_real_escape_string() for Perl's DBI?
10136
How can I add user-supplied input to an SQL statement?
15853
Is there a way to see a prepared query as it will be executed on the database?
151556
Escaping MySQL wild cards
60773
Can I parameterize the table name in a prepared statement?
122816
SQL injection with php filtering
157148
What are the valid characters in PHP variable, method, class, etc names?