I haven't noticed any reference to using PDO + prepared statements to improve security. (German forums perhaps?) Are there any plans for this in future versions?
For those who are interested: http://php.net/manual/en/pdo.prepared-statements.php
...
QuoteAre there any plans for this in future versions?
yes.. from WB2.9 up. Step by step, because it's a lot to change.