How to escape sql injection from HANA placeholder
问题 I have some HANA queries which use PLACEHOLDER input and of course I want to prevent an sql injection. I try to use ? in odbc_prepare() $query = <<<SQL SELECT col, ... FROM table_name('PLACEHOLDER'=('$$some_key$$', ?)) WHERE col = ? SQL; $stmt = \odbc_prepare($conn, $query); if ($stmt !== false) { \odbc_execute($stmt, ['placeholder_value', 'where_value']); } but I receive this warning: Warning: odbc_prepare(): SQL error: [SAP AG][LIBODBCHDB SO][HDBODBC] Syntax error or access violation;257