|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
| • |
However,
instead of interpolating the generated
|
|
|
value
into the SQL statement, you specify a
|
|
|
|
placeholder
and then bind the generated value
|
|
|
|
to
that
|
|
|
| • |
For
example:
|
|
|
$sth = $dbh->prepare( "
|
|
|
SELECT name, location
|
|
|
FROM megaliths
|
|
|
WHERE name = ?
|
|
|
" );
|
|
|
$sth->bind_param( 1,
$dbh->quote( ‘Avebury’ ) );
|
|
|
|