Why should PDO::ATTR_EMULATE_PREPARES be set to false?
- A To improve performance only
- B So the database performs the preparation, giving genuine parameterisation
- C To enable persistent connections
- D To support more drivers
Answer
So the database performs the preparation, giving genuine parameterisation
Emulated prepares build the query string in the driver, which is not equivalent protection against injection.





