Breaking News: Grepper is joining You.com. Read the official announcement!

\PDO::ATTR_EMULATE_PREPARES => true Security issue

Killer KZ answered on July 1, 2021 Popularity 4/10 Helpfulness 2/10

answer \PDO::ATTR_EMULATE_PREPARES => true Security issue

\PDO::ATTR_EMULATE_PREPARES => true Security issue

Comment

 The option

'options'   => [
                \PDO::ATTR_EMULATE_PREPARES => true
            ]
will resolve the issue, However, beside the security issues it generates, it also effect all select queries that you perform on the DB in the way that it force/convert every returned type from the DB to be string instead of the real type (integer/ float)

How does it effect you?

if you have a validation layer above the result of the query, you can't perform something like (

if (is_int($model->id))
) which will return 0 always, because it's string not an integer anymore.

Popularity 4/10 Helpfulness 2/10 Language php

Source: laracasts.com

Tags: php security

Link to this answer
Share Copy Link

Contributed on Jul 01 2021

Killer KZ

0 Answers Avg Quality 2/10

Continue with Google

By continuing, I agree that I have read and agree to Greppers's Terms of Service and Privacy Policy.

\PDO::ATTR_EMULATE_PREPARES => true Security issue

Contents

More Related Answers

\PDO::ATTR_EMULATE_PREPARES => true Security issue

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.