DB_escape_string

[serakfalcon]

Hey icedlava, some quick comments about your code,
You notice I have completely different code for the switch(gettype($val)) -> this is because gettype() returns a php type, so it will never return 'blob' for example, and will cause problems if a boolean is passed as a value.

Also, the $SQLArray = explode(' ', $query), while it is in the existing code, is brittle, for example, if there is a space before the statement it will cause the audit trail to not work on that SQL statement, whereas mine still uses some heuristics but errs on the side of over-reporting rather than under-reporting. I also tried to wrap everything inside the same function to avoid proliferation of 'helper' functions that only will be used for this purpose.

My code also has more robust error reporting, a it generates errors if the statement could not be prepared, if the variables could not be bound, and if the statement could not be executed.

Of course, since I use ReflectionMethod the code is strictly PHP 5.3+ but i find it more clear and less likely to cause weird problems than call_user_func_array(), although it's trivial to switch it back if we want to support legacy PHP installations (although seriously, who is still using PHP 5.2 and down, it's 8 years old!)