[bpicolo]

> mitigates any potential SQL injection problems

Not quite, string concat for defining queries is still plenty vulnerable regardless of PDO.

[dmilicevic]

it mitigates quite some SQL injection possibilities, but yes, string concat while building queries still remains an issue.