[freetds] Prepared statement + date fields

Bort, Paul pbort at tmwsystems.com
Fri Jun 2 09:26:32 EDT 2006


> I can't think of anyway that using placeholders guards against
> miscellaneous code executution.  
> 

I think that the binding process automatically handles escaping single
quotes, so it stops SQL injection attacks.



More information about the FreeTDS mailing list