Mysqli登录 - 我用这段代码保护免受Sql注入？ [关闭]

Question

I've been cruising on the forums for a while now and I was wondering if this is a secure decent way to create a login in mysqli.

It seems too easy and i'm not sure because the tutorial isn't using prepared statements...

Mysqli - Login tutorial

Is this a proper way of doing things?

I also found this and this seems "decent"

How does the daily programmer do this?

Is PDO so much more adviced even if your only using it for things such as databases for clubs, stores etc....rather than a big firm?

Better way?

Answer 1

PDO might be a better way to go. It can provide for prepared statements which can remove instances of SQL injection attacks

Have a look at the manual for PHP's PDO here