sql injection - How to verify security of meekrodb? -

meekrodb simple php-->mysql library. how test/verify secure, such against sql injection attacks?

the first option read faq:

are there precautions should take prevent sql injection?

meekrodb makes sql injection 100% impossible if follow 2 simple rules. first, never use %l (literal) placeholder user-supplied data. placeholder doesn't escape data way of others do. second, never change character set @ runtime using mysql commands set names or set character set. if need change character set, use db::$encoding @ same place set mysql username/password.

the second option, assuming have license:

use query/input field filling in:

'\" 

which potentially cause weirdest errors have ever seen. might converted, in case prove it's secure.

update

for example, going there first claim (in combination security):

"meekrodb takes care of quotes , escaping you."

now testing specific claim have provided there way of handling situation:

db::query("select * login username=%s , password=%s",                                                          $username,                                                          $password); 

to prove claim true, write small application (for example) input:

$username = "''""\";