Connecting PHP to MySQL using PDO

1. Why Use PDO (PHP Data Objects)?

PHP offers two modern interfaces to interact with relational databases: MySQLi and PDO. PDO is the industry standard for production PHP development because:

• Database Agnostic: Works with MySQL, PostgreSQL, SQLite, Oracle, and SQL Server via unified API methods.
• Security: First-class native support for Prepared Statements, preventing SQL injection vulnerabilities.
• Object-Oriented: Robust exception handling through PDOException.

2. Creating a Database Connection with PDO

A PDO connection requires a Data Source Name (DSN), database credentials, and driver configuration options:

 PDO::ERRMODE_EXCEPTION, // Throw exceptions on errors
    PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,        // Return associative arrays
    PDO::ATTR_EMULATE_PREPARES   => false,                  // Use genuine native prepared statements
];

try {
    $pdo = new PDO($dsn, $user, $pass, $options);
    echo "Successfully connected to MySQL database using PDO.";
} catch (PDOException $e) {
    // In production, log the error rather than exposing sensitive connection details
    error_log($e->getMessage());
    die("Database connection failure. Please try again later.");
}

3. Recommended Connection Best Practices

• Always use charset=utf8mb4 to properly store multi-byte Unicode characters, mathematical symbols, and Hindi/regional text.
• Ensure PDO::ATTR_EMULATE_PREPARES => false is active so that SQL parameters are bound natively by the MySQL server rather than emulated through string substitution.
• Store credentials in environment variables (e.g., using vlucas/phpdotenv) rather than hardcoding them into Git repositories.