db class: how can I avoid sql injection?
255
How can I prevent SQL injection in PHP?
11030
mysqli_fetch_assoc() expects parameter / Call to a member function bind_param() errors. How to get the actual mysql error and fix it?
39195
Variable scope - database.query() has access to variables not in scope
15853
Is there a way to see a prepared query as it will be executed on the database?
145158
When is Class.forName needed when connecting to a database via JDBC in a web app?
72009
How to Prevent the System.QueryException
149657
Alternative to mysql_real_escape_string without connecting to DB
36635
Are PDO prepared statements sufficient to prevent SQL injection?
146393
Check to see if an email is already in the database using prepared statements
154568
Optimal way to ignore duplicate inserts?
13546
Correct way to use LIKE '%{$var}%' with prepared statements? [mysqli]
109042
Are there simple command line tools to decode a SQL Injection request string?
24024
PHP and MySQL error: Object of class mysqli_result could not be converted to string
12867
How can I protect MySQL username and password from decompiling?
80725
Turning query errors to Exceptions in MySQLi
108153
Preparing a MySQL INSERT/UPDATE statement with DEFAULT values
13027
Object of class mysqli_result could not be converted to string