PHP RFC: PDO Driver specific SQL parsers| wiki.php.net
Searchlight Cyber's Security Research team details a Novel Technique for SQL Injection in PDO's Prepared Statements.| Searchlight Cyber