Rob’s Photos

Photo, Image and Animation Gallery

This is a proof-of-concept online album.

I coded it in PHP and it reads from a MySQL database using the MySQLi API.

Why did I use the MySQLi API?

Why didn’t I use the PDO API instead?

Surely the PDO API is better?

It is true that the PDO API is more secure than the MySQLi API as it automatically sanitizes user input and prevents SQL injections attacks but because user input simply doesn’t happen here the extra security afforded by the PDO API is completely irrelevant.

Also, PDO is a general-purpose database API whereas MySQLi is specific to MySQL and is therefore significantly faster than PDO.