There is no SQL escaping methods, nor PDO data binding methods.

There is no SQL escaping methods, nor PDO data binding methods.

Good job with the various databases compatibility (method to get latest ID, etc.) Maybe you should add SHOW TABLES, and SHOW DATABASES equivalents?

Ok Artur, in the next version you will see and use the functions that you comment. Thanks for you comment.

Hi Artur just for notify, the class has been updated. today include one method for secure statements, binding the params. i hope that you liked the changes.

If you bindParam an email, or anything with a @, you're doom.

$email = $_POST["email"];//"desarrollo@innatia.com";
$params = array(":email@".$email."@STR");
$rows = $this->db->query_secure("SELECT password FROM usuarios WHERE email = :email LIMIT 1;", $params, true);

How can you escape it ?

I change the separator to [[@]].

But now i have another problem :)
rowcount() doesnt work with query_secure's queries.
Any ideas without using PHP count() ?

Hi Ignacio give me a lot time for testing the class and modify for better functionally...