Php 将类与PDO一起使用

Php 将类与PDO一起使用,php,class,pdo,Php,Class,Pdo,我决定在这里推荐后使用PDO,我在下面找到了这段代码。这些代码足以防止SQl注入吗?上课是更好的选择吗 <? class database { private $hostname; private $database; private $username; private $password; private $pdo; function __construct($hostname, $database, $username, $password) { $this->pdo =

我决定在这里推荐后使用PDO,我在下面找到了这段代码。这些代码足以防止SQl注入吗?上课是更好的选择吗

<?
class database {

private $hostname;
private $database;
private $username;
private $password;
private $pdo;
function __construct($hostname, $database, $username, $password) {

$this->pdo = new PDO("mysql:host={$this->hostname};port={$this->port};dbname={$this->database}", $this->username, $this->password, array(PDO::ATTR_PERSISTENT => true));

} catch(PDOException $e) {

print "<b>Error - Connection Failed: </b>" . $e->getMessage() . "<br/>";
die();
}
}

public function query($query, $bind = null) {
global $pdo;

$this->statement = $this->pdo->prepare($query);
$this->statement->execute($bind);
}



$date = date("Y-m-d H:i:s", time());

$database->query('INSERT INTO users_inactive(verCode, username, password, email, date) VALUES (?, ?, ?, ?, ?)', array($verCode, $username, $password, $email, $date));

$success[] = "You account has been created!";

?>


此代码包含语法错误、速记和通配符。不,它不够好用

我一眼就能发现这段代码至少有3个问题。不要使用它。快速问题:在使用它之前,您是否确实将
$database
初始化为
数据库
-类对象?是的,代码当前运行没有问题$database=新数据库(“localhost”、“test”、“root”、“rootpass”);