將mysql_fetch_assoc轉換爲PDO

Question

我正在努力將下面的安全轉換爲PDO。有任何想法嗎？謝謝你的幫助。

function getSlug($param) 
{ 
    $query = mysql_query("SELECT * FROM articles WHERE slug = '$param'") OR die(mysql_error()); 
    return mysql_fetch_assoc($query); 
} 

Answer 1

PDO CONNECTION

連接和連接管理¶

Connections are established by creating instances of the PDO base class. It doesn't matter which driver you want to use; you always use the PDO class name. The constructor accepts parameters for specifying the database source (known as the DSN) and optionally for the username and password (if any).

<?php 

$dbh = new PDO('mysql:host=localhost;dbname=test', $user, $pass); <<== This is the PDO DATABASE OBJECT 

function getSlug($param) 
{ 
$sth = $dbh->prepare("SELECT * FROM articles WHERE slug = ?"); <<== First you need to prepare it 
$sth->execute(array($param)); <<== Then execute it using params 
$result = $sth->fetchAll(PDO::FETCH_ASSOC); <<== Then USe PDO Constant to get Associative array 
return $result; <<<== Then return it 

} 
?>