&gt; PDO is awesome but requires deeper level of understanding (for a beginner), which may increase the frustration and may end up returning back to the mysql_query and co.<p>Yeah, that&#x27;s basically why I wrote EasyDB. <a href="https:&#x2F;&#x2F;github.com&#x2F;paragonie&#x2F;easydb" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;paragonie&#x2F;easydb</a><p><pre><code>    $rows = $db-&gt;run(&#x27;SELECT * FROM comments WHERE blogpostid = ? ORDER BY created ASC&#x27;, $_GET[&#x27;blogpostid&#x27;]);
    foreach ($rows as $row) {
        &#x2F;&#x2F; etc
    }
</code></pre>
Teach people to do things this way rather than concatenate strings, say goodbye to SQL injection vulnerabilities.