Can the script below be improved in anyway? Would it be possible to automatically get the type of the $params and bind them dynamically, would this pose a secuirty threat or not?

PHP Code:

class MySQLDB {
   var $numRows = 0;
   var $queryTime = 0;
   var $totalQueryTime = 0;
   var $queryCount = 0;

function query($sql, $params, $close){
    
    // Reset Variables
        $this->numRows = 0;
        $this->queryTime = 0;
        
        $time_start = $this->microtime_float();
        
           $mysqli = new mysqli(DB_xxx, DB_xxx, DB_xxx, DB_xxx);
           $stmt = $mysqli->prepare($sql) or die ("Failed to prepared the statement!");

           if(count($params) > 1)
           call_user_func_array(array($stmt, 'bind_param'), $this->refValues($params));

           $stmt->execute();
           $stmt->store_result();

           if($close){
               $result = $mysqli->affected_rows;
           } else {
               $meta = $stmt->result_metadata();
           
               while ( $field = $meta->fetch_field() ) {
                   $parameters[] = &$row[$field->name];
               } 
       
            call_user_func_array(array($stmt, 'bind_result'), $this->refValues($parameters));
              
            while ( $stmt->fetch() ) { 
               $x = array(); 
               foreach( $row as $key => $val ) { 
                  $x[$key] = $val; 
               } 
               $results[] = $x; 
            }

            $result = $results;
           }
           
           // Query information
           
           $this->num_rows = $stmt->num_rows;
           
           //Close query and mysql connection
           $stmt->close();
           $mysqli->close();
           
           // Query Information
           $time_end = $this->microtime_float();
           $this->queryTime = $time_end - $time_start;
           $this->totalQueryTime .= $this->queryTime;
           $this->queryCount++;
          
           return $result;
   }
  
    private function refValues($arr){
        if (strnatcmp(phpversion(),'5.3') >= 0) //Reference is required for PHP 5.3+
        {
            $refs = array();
            foreach($arr as $key => $value)
                $refs[$key] = &$arr[$key];
            return $refs;
        }
        return $arr;
    }

    function microtime_float()
{
    list($usec, $sec) = explode(" ", microtime());
    return ((float)$usec + (float)$sec);
} 


Why not use PDO Data abstration class in PHP 5?

This website has some good PDO examples.

http://www.phpro.org/tutorials/Intro...PHP-PDO.html#2

Any ideas how i can dynamically bind parameters?

Using prepared statements:
http://phpro.org/tutorials/Introduct...HP-PDO.html#10