>使用
prepared statements
>随意格式化您的代码
>随意格式化您的代码
代码示例：
$stmt = $pdo->prepare('
SELECT ...
FROM ...
JOIN ...
JOIN ...
WHERE ... AND abc = :abc AND def = :def
');
$stmt->execute(array(
'abc' => 'abc value','def' => 'def value'
));
