Prevent SQL Injection on Codeigniter

[davy_yg]

Hello,

I am trying to prevent SQL Injection on Codeigniter. I am reading this link:

https://www.roytuts.com/prevent-sql-injection-in-codeigniter/

I do not understand what is the purpose of Escaping Queries, Query Binding and Active Record.

Thanks in advance.

[pty]

https://stackoverflow.com/questions/10646142/what-does-it-mean-to-escape-a-string

[davy_yg]

Also What is PHP - PDO ?

I wonder why in the Query Parameterization it mentions:

https://www.owasp.org/index.php/Query_Parameterization_Cheat_Sheet

PHP - PDO ?

I thought PDO is only for the first query connections - is that true?

Such as in: https://www.w3schools.com/php/php_mysql_prepared_statements.asp