A completed Compiled structure contains the full SQL string and collection of bound values.
一个完成的Compiled结构包含完整的SQL字符串,并绑定值的集合。
You can get the SQL string for a query by using your database tool's SQL view. In Microsoft Access 97, you can view SQL for a query by opening the query in Design Mode and then choosing the View SQL item from the View menu.
Much safer would be to encode the tainted value of $name to a SQL string literal and use the result in the SQL query, guaranteeing that no dangerous command embedded in $name will be evaluated.
Bound parameters are also supported in Phalcon\Mvc\Model. You are encouraged to use this methodology so as to eliminate the possibility of your code being subject to SQL string and integer placeholders are supported. Binding parameters can simply be achieved as follows
Exemplele au rolul de a te ajuta să traduci cuvinte sau expresii corect si adaptat la context. Nu sunt selectate sau validate manual, așadar pot conține termeni inadecvați. Te rugăm să raportezi exemplele pe care le consideri inadecvate. Traducerile vulgare sau colocviale sunt în general marcate cu roșu sau cu portocaliu.