What is PDO & why should I use it?

by

Consider PDO as a built in class that comes packaged with PHP to make it very easier for you to interact with your database. while developing a PHP Application you need to take care of lots of things like establish a connection, create query, to fetch the result convert resource into an array, escape MySQL Injection using mysql_real_escape_string() now that is a lot of things to be taken care of, least but not the last consider a situation where you want to jump from mysql to mysqli or MSSQL for that you need to go through each and every function and change every line of code to suit the need. PDO eradicate all this problem by providing one centralized class.

To elaborate have a look at below code.

to establish a connection to MySQL Using PDO :

$dbh = new PDO('mysql:host=".HOST.";dbname=".DATABASE,USERNAME,PASSWORD);

that”s it, the connection is established and you could reuse $dbh for performing queries for example to fetch the result from a table user you just need two line of code.

$sth = $dbh->query('SELECT id,name,email FROM users');
$user = $sth->fetch(PDO::FETCH_ASSOC);

Now $user will have all the values fetched as an associative array.

To Insert value into the database you need to do the following.

$sth = $dbh->prepare('INSERT INTO users(name,email) VALUES(:name, :email)');
$sth->bindParam(':name', 'My Name');
$sth->bindParam(':email', '[email protected]');
$sth->execute();

The above code is using named placeholder, this way PDO will keep you safe from many vulnerabilities as it will keep you away from MySQL Injection. to get you started have a look at this tutorial by netttus, they have explained it very nicely, this article will explain all your dilemmas regarding PDO

http://net.tutsplus.com/tutorials/php/why-you-should-be-using-phps-pdo-for-database-access/

More Related Contents:

  1. Why does this PDO statement silently fail?
  2. Cleansing User Passwords
  3. How to get numeric types from MySQL using PDO?
  4. How can I use PDO to fetch a results array in PHP?
  5. What are the disadvantages of using persistent connection in PDO
  6. PHP PDOException: “SQLSTATE[HY093]: Invalid parameter number”
  7. PDO prepared statement – what are colons in parameter names used for?
  8. php pdo: get the columns name of a table
  9. Use bound parameter multiple times
  10. MySQL check if a table exists without throwing an exception
  11. PDO bindParam vs. execute
  12. how safe are PDO prepared statements
  13. Error logging, in a smooth way
  14. PDO error message? [duplicate]
  15. Replacing mysql_* functions with PDO and prepared statements
  16. How to make PDO run SET NAMES utf8 each time I connect, In ZendFramework
  17. How do I sanitize input with PDO?
  18. Calling stored procedure with Out parameter using PDO
  19. When *not* to use prepared statements?
  20. How to insert an array into a single MySQL Prepared statement w/ PHP and PDO
  21. Setting a connect timeout with PDO
  22. What is the best way to insert multiple rows in PHP PDO MYSQL?
  23. PDO MySQL: Insert multiple rows in one query
  24. How to bind LIKE values using the PDO extension?
  25. Warning: PDO::__construct(): [2002] No such file or directory (trying to connect via unix:///tmp/mysql.sock) in
  26. PDO LIMIT and OFFSET [duplicate]
  27. PHP 7 RC3: How to install missing MySQL PDO
  28. I’m getting this error code: Invalid argument supplied for foreach() [duplicate]
  29. PHP namespace PDO not found
  30. Is a BLOB converted using the current/default charset in MySQL?

Leave a Comment