query: Is mysqli_real_escape_string enough to prevent SQL injection?
positive_passages.docid: 255
positive_passages.text: How can I prevent SQL injection in PHP?
negative_passages.docid: 41368
negative_passages.text: How can I make SQL case sensitive string comparison on MySQL?
negative_passages.docid: 16324
negative_passages.text: How does a PreparedStatement avoid or prevent SQL injection?
negative_passages.docid: 156732
negative_passages.text: Using wildcards in prepared statement - MySQLi
negative_passages.docid: 78965
negative_passages.text: How to successfully rewrite old mysql-php code with deprecated mysql_* functions?
negative_passages.docid: 136408
negative_passages.text: What does the mysqli_error() expects parameter 1 to be mysqli, null given mean?
negative_passages.docid: 39565
negative_passages.text: How to make MySQL handle UTF-8 properly
negative_passages.docid: 158241
negative_passages.text: Will using LINQ to SQL help prevent SQL injection
negative_passages.docid: 13458
negative_passages.text: How can I sanitize user input with PHP?
negative_passages.docid: 6235
negative_passages.text: Is SQL syntax case sensitive?
negative_passages.docid: 103874
negative_passages.text: Warning: mysqli_stmt::bind_result(): Number of bind variables doesn't match number of fields in prepared statement error
negative_passages.docid: 101638
negative_passages.text: How do I make sure that values from MySQL keep their type in PHP?
negative_passages.docid: 10938
negative_passages.text: Escaping quotation marks in PHP
negative_passages.docid: 123619
negative_passages.text: Shouldn't mysql_real_escape_string() leave slashes in Database?
negative_passages.docid: 55886
negative_passages.text: SOQL Injection Prevention
negative_passages.docid: 80725
negative_passages.text: Turning query errors to Exceptions in MySQLi
negative_passages.docid: 105357
negative_passages.text: Ignore mysql error messages when executing an sql file