I would check first if date_default_timezone_get()
returns a valid value, to avoid a query like: SET time_zone = ""
.
Is this php/mysql expression (which sets the timezone of connection) safe enough?
Pregunta
Is this expression is safe or does this approach has vulnerabilities?
$pdo = new PDO('mysql:host=localhost;dbname=test', 'user', 'password');
$pdo->exec('SET time_zone = "' . date_default_timezone_get() . '"');
No hay solución correcta
Otros consejos
Licenciado bajo: CC-BY-SA con atribución
No afiliado a StackOverflow