Back
Syntax
Study
Editor
Mode:
HTML
CSS
JavaScript
PHP
Reset
Run »
HTML / CSS / JS
-- VULNERABLE (never do this): -- SELECT * FROM users WHERE username = "input"; -- SAFE: Use prepared statements PREPARE stmt FROM "SELECT * FROM users WHERE username = ?"; SET @username = "alice"; EXECUTE stmt USING @username; DEALLOCATE PREPARE stmt; -- PHP PDO equivalent: -- $stmt = $pdo->prepare("SELECT * FROM users WHERE username = ?"); -- $stmt->execute([$input]);
Result
Open