Hacker News Reader

> mitigates any potential SQL injection problems

Not quite, string concat for defining queries is still plenty vulnerable regardless of PDO.

it mitigates quite some SQL injection possibilities, but yes, string concat while building queries still remains an issue.