防护SQL注入方法（1）-使用预编译语句

$query = "INSERT INTO myCity (Name, CountryCode, Distrit) VALUES (?,?,?)"; $stmt = $mysqli->prepare($query); $stmt->bind_param("sss", $val1, $val2, $val3); $val1 = 'Stuttgart'; $val2 = 'DEU'; $val3 =

>>阅读原文<<