I was browsing through some of Elgg's code and an undocumented class that isn't mentioned or used anywhere is the Query class abstraction for simple queries as well as complex queries.
I haven't seen any mods that are using this class, so I might start up a small tutorial to show how to query certain things with it. SimpleQuery extension of the Query class makes writing safe queries easier.
What I'm trying to reason though is why the Elgg community didn't use PHP's prepared statements instead of writing this Query abstraction? Take a look at it here:
http://us3.php.net/manual/en/pdo.prepare.php
<!-- end the topic_post --> <!-- start the topic_post -->
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by RaĆ¼l Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.
Great!
The example and the link are exactly what I needed
Thank you