### 预处理 ~~~ /** * 绑定参数，预处理，防止sql注入 */ public function bindParam() { $database = new Database(); // 需要绑定的参数 $param = ['user_id' => 5, 'username' => 'aaphp']; $result = $database->execute("select * from aa_user where id>:user_id and username!=:username", $param); var_dump($result); } ~~~