SQL Injection When Using MySQLi Prepared Statements
- by Sev
If all that is used to do any and all database queries is MySQLi prepared statements with bound parameters in a web-app, is sql injection still possible?
Notes
I know that there are other forms of attack other than sql-injection, but my question is specific to sql-injection attacks on that particular web application only.