Hacker News Reader

I thought they were phasing these functions out (mysql)? I've been using PDO for the last couple of years.

The problem is not which driver you use. It's whether you concatenate strings to form sql queries and then execute them against your database.

I think the point he was trying to make, was that using prepared statements with PDO or mysqli would prevent this

exactly.