Move to PDO

[crablab]

Change all the databases to use prepared statements and OOP PDO.

[Arinerron]

Mind if I ask why we should use PDO? MySQLi seems sufficient. Why features would PDO offer that MySQLi doesn't that we need?

PDO Prepared Statements can still be exploited. PoC payload is \xbf\x27 OR 1=1 /*. I mean, there are ways around it, but why bother when what we have has the same performance?

[Arinerron]

Whoops, didn't mean to close. Sorry.

[crablab]

PDO is abstracted from the database type so it easier to move to a no-SQL db for example. It is also more efficient and you can name parameters.

[Arinerron]

@crablab Alrighty. We can try it out if you'd like!

[eviltak]

I recommend we do this on a separate branch forked from the development branch.

[Arinerron]

@eviltak Yeah. This is going to be tedious to merge.

[crablab]

There's a branch open already. I'll commit today.