Return to Answer

replaced http://stackoverflow.com/ with https://stackoverflow.com/

edited May 23, 2017 at 12:40

Why only disable emulate prepares in production code: because debugging is probably something you do on your local machine, or using a VBox + vagrant. Emulating prepared statements is a good way to spot malformed queries without having to burden your DB server. Still, once you go live: use real prepared statements, though.
Warning: don't just go ahead and switch to native prepared statements and push to production, of course. Always make sure your queries still work, and produce the same results as before! There are differences and gotcha's to keep in mind differences and gotcha's to keep in mind

replaced http://codereview.stackexchange.com/ with https://codereview.stackexchange.com/

Source Link

edited Apr 13, 2017 at 12:40

Community Bot

edited Apr 13, 2017 at 12:40

Community Bot

I've been quite vocal on the fourth argument of the PDO constructor, and on the UTF-8 business, just recently. Instead of copy-pasting my previous answer, here's a link here's a link.
Basically, what I'd recommend you do is this:

I've been quite vocal on the fourth argument of the PDO constructor, and on the UTF-8 business, just recently. Instead of copy-pasting my previous answer, here's a link.
Basically, what I'd recommend you do is this:

added 398 characters in body

Source Link

edited Jun 24, 2014 at 15:23

Elias Van Ootegem

edited Jun 24, 2014 at 15:23

Elias Van Ootegem

$db = new PDO(
 'mysql:host=127.0.0.1;port=3306;dbname=myDb;charset=UTF8',
 $userName,
 $pass,
 array(
 PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
 PDO::ATTR_ORACLE_NULLS => PDO::NULL_NATURAL,
 PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_OBJ,
 //production only - read warning below, though
 PDO::ATTR_EMULATE_PREPARES => false,
 PDO::MYSQL_ATTR_INIT_COMMAND => "SET NAMES 'UTF8'"
 )
);

$db = new PDO(
 'mysql:host=127.0.0.1;port=3306;dbname=myDb;charset=UTF8',
 $userName,
 $pass,
 array(
 PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
 PDO::ATTR_ORACLE_NULLS => PDO::NULL_NATURAL,
 PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_OBJ,
 //production only
 PDO::ATTR_EMULATE_PREPARES => false,
 PDO::MYSQL_ATTR_INIT_COMMAND => "SET NAMES 'UTF8'"
 )
);

$db = new PDO(
 'mysql:host=127.0.0.1;port=3306;dbname=myDb;charset=UTF8',
 $userName,
 $pass,
 array(
 PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION,
 PDO::ATTR_ORACLE_NULLS => PDO::NULL_NATURAL,
 PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_OBJ,
 //production only - read warning below, though
 PDO::ATTR_EMULATE_PREPARES => false,
 PDO::MYSQL_ATTR_INIT_COMMAND => "SET NAMES 'UTF8'"
 )
);