[DarthVader]

Hey a newbie question : i wanna select all data from a table(i.e: Select * From `something`) but i've read somewhere that this is a bit risky so my question is:

Is there any way to prevent sql injection while selecting all data from a table ?

[Mafia]

Use PDO statements.
http://php.net/manual/en/class.pdostatement.php

[DarthVader]

Use PDO statements.
http://php.net/manual/en/class.pdostatement.php

no way to do it using mysqli ?

[Mafia]

Use PDO statements.
http://php.net/manual/en/class.pdostatement.php

no way to do it using mysqli ?

I'm not sure, I have always used PDO statements, but I guess you can just sanitise it and check before it's executed.

[cisla]

You can also prepare queries with unnamed binding using MySQLi.

[Para]

Use PDO statements.
http://php.net/manual/en/class.pdostatement.php

no way to do it using mysqli ?

You can but PDO is the preferred method nowadays.

[DarthVader]

no way to do it using mysqli ?

You can but PDO is the preferred method nowadays.

Okay, thanks for your answers guys

[Para]

You can but PDO is the preferred method nowadays.

Okay, thanks for your answers guys

I learnt PDO from this site a while back
http://prash.me

[DarthVader]

Okay, thanks for your answers guys

I learnt PDO from this site a while back
http://prash.me

Oh thank you this is way more clear than the php.net manual

[Para]

I learnt PDO from this site a while back
http://prash.me

Oh thank you this is way more clear than the php.net manual

PHP.net can be great sometimes but the examples can be muddled and people use functions differently which can be confusing.