[tlug] PHP functions to create MySQL syntax? (was: Do you whitelist or blacklist utf-8?)

[Dave M G <dave@example.com>]

Peter,

Thanks for replying.

> Never build your SQL-queries by String-concatenation. 
> Instead, use the mechanisms that your progamming environment provides.

After reading this, I've been looking around the PHP manual, and I don't
see any "mechanisms" for constructing SQL queries. All the examples in
the MySQL function list take concatenated strings as arguments to send
to the MySQL server.

http://www.php.net/manual/en/ref.mysql.php

Surely if any language had MySQL syntax constructors it would be PHP....
no? Am I not seeing them?

-- 
Dave M G