Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:117710
MIME-Version: 1.0
References: <CAFv4g+HVtZPhaq+=28ViN8rJKCHCtNJuEWYpWvdSi54_3aNTmg@mail.gmail.com>
 <CAFv4g+FFTzDqw2cyMj1=xuqHF9idV7fyE_W4f8iuxqe2zsE4uw@mail.gmail.com>
In-Reply-To: <CAFv4g+FFTzDqw2cyMj1=xuqHF9idV7fyE_W4f8iuxqe2zsE4uw@mail.gmail.com>
Date: Tue, 10 May 2022 12:40:06 +0100
Message-ID: <CAFv4g+FdmpFDL7dq266=-U6Snvo3NZAxdRwWKBuXrWd7rcF+0A@mail.gmail.com>
To: PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="000000000000ecaf9f05dea6c9c2"
Subject: Re: MySQLi Execute Query RFC
From: craig@craigfrancis.co.uk (Craig Francis)

--000000000000ecaf9f05dea6c9c2
Content-Type: text/plain; charset="UTF-8"

On Thu, 21 Apr 2022 at 15:04, Craig Francis <craig@craigfrancis.co.uk>
wrote:

> On Wed, 6 Apr 2022 at 17:38, Craig Francis <craig@craigfrancis.co.uk>
> wrote:
>
>> Kamil has been working on a proof of concept for a
>> `mysqli_execute_query($sql, $params)` function, and I've written up a draft
>> RFC for it:
>>
>> https://wiki.php.net/rfc/mysqli_execute_query
>>
>> It's continuing the work Kamil has done with the "mysqli bind in execute"
>> RFC [1], to make parameterised MySQLi queries even easier, by creating a
>> single function that takes the SQL and Parameters and
>> returns mysqli_result|false.
>>
>> While this can be implemented in userland, the focus is on trying to make
>> parameterised queries as easy as possible, so developers are less less
>> likely to use risky escaping.
>>
>
> Just officially Introducing and putting this RFC in the "Under Discussion"
> phase.
>


And step 6... a one day heads up before this is moved to the Voting status,
where there are currently no Open Questions/Issues.

Thanks,
Craig

--000000000000ecaf9f05dea6c9c2--