Changeset 729 for trunk/lib/PDO.inc.php

Timestamp:

Jun 30, 2020 12:58:18 AM (4 years ago)

Author:

anonymous

Message:

 

File:

• trunk/lib/PDO.inc.php (modified) (1 diff)

trunk/lib/PDO.inc.php

@@ -184 +184 @@
 
         try {
+            // Set charset in DSN and disable emulated prepares as per https://stackoverflow.com/questions/134099/are-pdo-prepared-statements-sufficient-to-prevent-sql-injection/12202218
             $dsn = sprintf('mysql:host=%s;dbname=%s;charset=%s', $this->getParam('db_server'), $this->getParam('db_name'), $this->getParam('character_set'));
             $options = [