Search code examples
phpmysqlmysqlipdosql-injection

Doubts of security: Mysqli vs PDO


i've started to create my website, but now i have few doubts. I've searched, that MySqli object oriented is good to use because you can prepare the queries, use bind_param and execute. The MySqli from my website looks like this: PHP MySQLI Prevent SQL Injection

But, this is good enough? My website need a good code like this to become more secure for SQL Injection, but it makes me immune for DDoS and defaces?

Backing to the topic: Mysqli is equal to PDO in secure and performance?


Solution

  • There is no difference in security, but only in usability. Mysqli is unusable as is, leaving PDO the only choice.