PHP PDO添加编辑更新选择状态

这些是我的MVC模式实现的添加、编辑、删除和选择功能

我需要使用

PDO

知道这个实现是否正确

这些是模型类函数：

   public function getStudentById($id){

        $stmt       = $this->db->con->query("SELECT * FROM student WHERE id = '$id'");
        $result     = $stmt->fetch(PDO::FETCH_ASSOC);

        return $result;

    }

    public function addStudent($arrData){

        $sql        = " INSERT INTO student (name,age,address)".
                      " VALUES ('$arrData[name]','$arrData[age]','$arrData[address]')";

        $stmt       = $this->db->con->prepare($sql);
        $stmt->execute();

        return $this->db->con->lastInsertId(); 

    }

    public function editStudent($arrData){

        $sql        =   " UPDATE student SET ".
                        " name='$arrData[name]',age='$arrData[age]',address='$arrData[address]'".
                        " WHERE id=$arrData[id] ";

        $stmt       = $this->db->con->prepare($sql);
        $stmt->execute();

        return $this->db->con->lastInsertId(); 

    }


    public function deleteStudent($id){

        $stmt       = $this->db->con->query("DELETE FROM student WHERE id = '$id'");

    }

---

不管正确与否，你都可以更容易、更安全地完成。PDO的主要优点之一是支持参数化查询，您只需编写占位符并让PDO插入值。这将有助于防止SQL注入，因为PDO将为您执行正确的格式设置

$sql = 'SELECT * FROM student WHERE id = ?';
$statement = $db->prepare($sql);
$statement->bindValue(1, $id, PDO::PARAM_INT); // or PDO::PARAM_STR
$statement->execute();

---

为论点使用占位符此问题似乎与主题无关，因为它是关于