sanitizing inputs with prepared PDO statements explanation
255
How can I prevent SQL injection in PHP?
78121
PDO::PARAM for type decimal?
146393
Check to see if an email is already in the database using prepared statements
54520
What are the best practices for avoiding xss attacks in a PHP site
42064
How do you Encrypt and Decrypt a PHP String?
3705
How can I prevent SQL injection with dynamic tablenames?
10038
My PDO Statement doesn't work
108153
Preparing a MySQL INSERT/UPDATE statement with DEFAULT values
107307
Can I protect against SQL injection by escaping single-quote and surrounding user input with single-quotes?
95323
Is there an equivalent of PHP's mysql_real_escape_string() for Perl's DBI?
93041
using nulls in a mysqli prepared statement
113084
How to strip all array keys appended with :protected?
112683
What is PHP's serialize() function for?
119597
How to use mysqli prepared statements?
156732
Using wildcards in prepared statement - MySQLi
32000
PDO - passing a field name as a variable
84727
PDO support for multiple queries (PDO_MYSQL, PDO_MYSQLND)