php中数据库连接方式pdo和mysqli对比分析

// PDO
$pdo = new PDO("mysql:host=localhost;dbname=database", 'username', 'password');
// mysqli, 面向过程方式
$mysqli = mysqli_connect('localhost','username','password','database');
// mysqli, 面向对象
$mysqli = new mysqli('localhost','username','password','database');

$params = array(':username' => 'test', ':email' => $mail, ':last_login' => time() - 3600);
$pdo->prepare('
SELECT FROM users
WHERE username = :username
AND email = :email
AND last_login > :last_login');

$query = $mysqli->prepare('
SELECT FROM users
WHERE username = ?
AND email = ?
AND last_login > ?');
$query->bind_param('sss', 'test', $mail, time() - 3600);
$query->execute();

class User
{
    public $id;
    public $first_name;
    public $last_name;
    public function info()
    {
        return '#' . $this->id . ': ' . $this->first_name . ' ' . $this->last_name;
    }
}
$query = "SELECT id, first_name, last_name FROM users";
// PDO
$result = $pdo->query($query);
$result->setFetchMode(PDO::FETCH_CLASS, 'User');
while ($user = $result->fetch())
{
    echo $user->info() . "\n";
}

if ($result = mysqli_query($mysqli, $query)) {
　　while ($user = mysqli_fetch_object($result, 'User')) {
　　echo $user->info()."\n";
　　}
}

// MySQLi, object oriented way
if ($result = $mysqli->query($query)) {
　　while ($user = $result->fetch_object('User')) {
　　echo $user->info()."\n";
　　}
}

$username = PDO::quote($_GET['username']);
$pdo->query("SELECT FROM users WHERE username = $username");

$username = mysqli_real_escape_string($_GET['username']);
$mysqli->query("SELECT FROM users WHERE username = '$username'");

$pdo->prepare('SELECT FROM users WHERE username = :username');
$pdo->execute(array(':username' => $_GET['username']));

$query = $mysqli->prepare('SELECT FROM users WHERE username = ?');
$query->bind_param('s', $_GET['username']);
$query->execute();