เปลี่ยนจาก MySQL ไปเป็น MySQLi with Prepare Statement

<?php  
  
$sql = "SELECT * \n";
$sql .= "FROM  tbl \n";
$sql .= "WHERE status = 'active' \n";
$sql .= "ORDER BY name";
$result = mysql_query($sql) or die("<pre>$sql</pre>".mysql_error());
$numrows = mysql_num_rows($result);  

?>

<?php  
try {	
 $sql = "SELECT * FROM tbl WHERE status = ?";
 $stmt = $con->prepare($sql);
 $stmt->bind_param('s', $status);
 $stmt->execute();
 $result = $stmt->get_result();
} catch(Exception $e) {
 $con->rollback(); //remove all queries from queue if error (undo)
 throw $e;
}

?>

<?php  
   $serverName = "(local)";   
   $database = "Databasename";  
   try {  
      $conn = new PDO( "sqlsrv:server=$serverName;Database = $database", "Username", "Password");   
      $conn->setAttribute( PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION );   
   }  
   catch( PDOException $e ) {  
      die( "Error connecting to SQL Server" );   
   }  
   echo "Connected to SQL Server\n";  
   $query = 'select * from Person.ContactType';   
   $stmt = $conn->query( $query );   
   while ( $row = $stmt->fetch( PDO::FETCH_ASSOC ) ){   
      print_r( $row );   
   }  
   $stmt = null;   
   $conn = null;   

?>