in reply to Re^4: Hacker Proofing My Script
in thread Hacker Proofing My Script

It doesn't seem to be totally secure:
As for LIMIT ?,?. The reason why it was not supported since 2.9002 is that it allowed for sql injection attacks, and it is not trivial to fix, in fact, I *just* scanned over Patrick's code and found a bug in the LIMIT handling code
as can be read in Re: New twist for DBD::mysql.

CountZero

"If you have four groups working on a compiler, you'll get a 4-pass compiler." - Conway's Law