php pdo与mysqli连接mysql用法对比

3. // pdo

4. $pdo = new pdo("mysql:host=localhost;dbname=database", 'username', 'password');

5. // mysqli, 面向过程方式

6. $mysqli = mysqli_connect('localhost','username','password','database');

7. // mysqli, 面向对象

8. $mysqli = new mysqli('localhost','username','password','database');

复制代码

3、数据库支持 pdo支持多种数据库，但mysqli只支持mysql

4、命名参数name parameter pdo方式：

2. $params = array(':username' => 'test', ':email' => $mail, ':last_login' => time() - 3600);
3. $pdo->prepare('
4. select * from users
5. where username = :username
6. and email = :email
7. and last_login > :last_login');

复制代码

而mysqli则麻烦点，不支持这样，只能：

2. $query = $mysqli->prepare('
3. select * from users
4. where username = ?
5. and email = ?
6. and last_login > ?');
7. $query->bind_param('sss', 'test', $mail, time() - 3600);
8. $query->execute();

复制代码

这样的话，一个个对问号的顺序，也比较麻烦，不大方便。

5、orm映射的支持 比如有个类user，例如：

2. class User
3. {
4. public $id;
5. public $first_name;
6. public $last_name;
7. public function info()
8. {
9. return '#' . $this->id . ': ' . $this->first_name . ' ' . $this->last_name;
10. }
11. }
12. $query = "SELECT id, first_name, last_name FROM users";
13. // PDO
14. $result = $pdo->query($query);
15. $result->setFetchMode(PDO::FETCH_CLASS, 'User');
16. while ($user = $result->fetch())
17. {
18. echo $user->info() . "\n";
19. }

复制代码

mysqli用面向过程的方式：

2. if ($result = mysqli_query($mysqli, $query)) {
3. 　　while ($user = mysqli_fetch_object($result, 'User')) {
4. 　　echo $user->info()."\n";
5. 　　}
6. }

复制代码

6、防止sql注入（php防止sql注入的方法解析）： pdo 手工设置

2. $username = pdo::quote($_get['username']);
3. $pdo->query("select * from users where username = $username");

复制代码

使用mysqli：

2. $username = mysqli_real_escape_string($_get['username']);
3. $mysqli->query("select * from users where username = '$username'");

复制代码

7、preparestament pdo方式：

2. $pdo->prepare('select * from users where username = :username');
3. $pdo->execute(array(':username' => $_get['username']));

复制代码

mysqli方式：

2. $query = $mysqli->prepare('select * from users where username = ?');
3. $query->bind_param('s', $_get['username']);
4. $query->execute();

复制代码