Prepared statements?

Does xPDO support prepared statements with php < 5?

Quote from: sottwell at Mar 03, 2007, 09:53 AM

Does xPDO support prepared statements with php < 5?

Yes, it emulates most of the features of PDO for PHP 4 and 5.0.x without PDO extensions (transaction support is not currently implemented, though it could be).

Ok. Now I need to really spend more time learning how to use xPDO. I’ve been studying MySQL with a view towards increasing security, and was rather surprised to learn that mysql_real_escape_string() isn’t all that great. Looks like prepared statements with carefully validated user input is closer to the answer. But it takes mysqli, which most shared hosts don’t seem to have, or PDO which of course is only good for php 5. Or xPDO!