When you start to build a new web site or web based project then having a good foundation is the key. That is why although the internal version of Web-D-Zine( WDZ ) has used MySQL and MySQLi for its foundation the new system will use PDO as its database handler. This will provide huge benefits to the end user
- More database systems - MySQLi works with only one database while the PDO model will work with twelve different databases.
- Increased flexibility - If you have the majority of your code using a particular database, then you can continue to use that and just add WDZ functions where required
- Bound statements - PDO splits the two commonly used insert and update database operation into a two-step process of
Prepare >> [Bind] >> Execute.
Prepared statements are pre-compiled SQL statements that can be executed multiple times by sending this data to the server. This data, which is used within the placeholder, is automatically protected from the SQL injection attack.
For the designers of WDZ it is the reduced risk SQL injection attacks that is the key benefit.