PDO in Codeigniter - Protect vs SQL Injection

Question

True PHP Security experts, is PDO the way to go or would I be ok with Codeigniter\'s Active Record class?

I have read http://codeigniter.com/forums/viewthread/179618

Answer 1

Well, there is a general answer for all the questions of this kind:

It's not a wand, it's a wizard.

(dunno where did i get that saying, but it seems I'm only one using it, but most likely I misspelled it)

There is nothing good or bad in the technology itself.
Everything depends on the hands that using it.

1. There is nothing insecure in mysql, if used properly.
2. PDO is not a magical aegis that covers your backss from all dangers by it's presence only.

Every time i see lame talks of SQL injection, it's always about dynamic data only.
While most danger comes from other query parts - say, dynamical identifiers. Where PDO can do a little less than nothing to deal with them.

So, there cannot be certain answer.
You can use whatever technology you like, as long as you understand what are you doing.
And contrary, if you don't understand how it works but just believe that some technology doing your job of protecting your app, you're already in trouble.

That's it.