Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:113150
MIME-Version: 1.0
References: <CAGBsUreh+N1h2tK_RDFcT_m3cTFDY7KZBF1L3hi_ZQzSwcWS9w@mail.gmail.com>
In-Reply-To: <CAGBsUreh+N1h2tK_RDFcT_m3cTFDY7KZBF1L3hi_ZQzSwcWS9w@mail.gmail.com>
Date: Fri, 12 Feb 2021 00:36:10 +0000
Message-ID: <CAFv4g+FH1Cu02_g-8XPCgUi3Ls2tr1PJSPx8JynGT_cZRSRBOg@mail.gmail.com>
To: Kamil Tekiela <tekiela246@gmail.com>
Cc: PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="00000000000038ad4d05bb18d3a4"
Subject: Re: [PHP-DEV] [RFC] mysqli bind in execute
From: craig@craigfrancis.co.uk (Craig Francis)

--00000000000038ad4d05bb18d3a4
Content-Type: text/plain; charset="UTF-8"

On Thu, 11 Feb 2021 at 7:43 pm, Kamil Tekiela <tekiela246@gmail.com> wrote:

> https://wiki.php.net/rfc/mysqli_bind_in_execute
>
> I'd be happy to hear your comments.




Please let this pass.

The current approach is absolutely horrible and causes so many developers
using mysqli to do things incorrectly (like trying to use escaping, which
is so easy to get make mistakes with).

Craig



On Thu, 11 Feb 2021 at 7:43 pm, Kamil Tekiela <tekiela246@gmail.com> wrote:

> Hi internals,
>
> I am proposing the next change to improve mysqli extension. This RFC's goal
> is to add a new optional parameter to mysqli_stmt:execute() that will take
> an array of parameters.
>
> The RFC is located at https://wiki.php.net/rfc/mysqli_bind_in_execute
>
> I'd be happy to hear your comments.
>
> Kind Regards,
> Kamil Tekiela
>

--00000000000038ad4d05bb18d3a4--