diff --git a/_includes/databases.md b/_includes/databases.md index d49271a..858926a 100644 --- a/_includes/databases.md +++ b/_includes/databases.md @@ -21,7 +21,13 @@ This is terrible code. You are inserting a raw query parameter into a SQL query. This is correct code. It uses a bound parameter on a PDO statement. This escapes the foreign input ID before it is introduced to the database preventing potential SQL injection attacks. * [Learn about PDO][1] +* [Doctrine2 DBAL][2] +* [ZF2 Db][4] +* [ZF1 Db][3] [Back to Top](#top){.top} [1]: http://www.php.net/manual/en/book.pdo.php +[2]: http://www.doctrine-project.org/projects/dbal.html +[3]: http://framework.zend.com/manual/en/zend.db.html +[4]: http://packages.zendframework.com/docs/latest/manual/en/zend.db.html