How to avoid lines in pdo?

Question

I would like to know how to avoid lines in pdo. I avoid springs, as in the code below, but now with pdo I don't know how to do this.

$username=(isset($_POST['username']))? trim($_POST['username']): ''; $previlage =(isset($_GET['previlage'])); $query ="SELECT * FROM site_user WHERE username = '".mysql_real_escape_string($_SESSION['username'])."' AND previlage ='Admin'"; $security = mysql_query($query)or die (mysql_error($con)); $count = mysql_num_rows($security); 

Answer 1

Well, you can use PDO :: quote , but as said in your own document ...

If you use this function to create SQL statements, it is highly recommended that you use PDO :: prepare () to prepare SQL statements with bound parameters, instead of using PDO :: quote () to interpolate user input into the SQL statement.

In your case, it might look like this:

 $query = "SELECT * FROM site_user WHERE username = :username AND previlage = 'Admin'"; $sth = $dbh->prepare($query); $sth->execute(array(':username' => $_SESSION['username']) ); 

Answer 2

mysql_* function will not work in PDO. WHAT FOR? Since PDO does not use mysql to connect to databases, because with regard to data processing PDO uses prepared instructions, you can find a good tutorial for this here: pdo