I was told by someone on the network that MariaDB was not susceptible to blind SQL injection. I was not aware of this. Can anyone elaborate? I am using it on my server and was told not to switch to PDO because I did not have to worry about it.
MariaDB is a fork of MySQL, and "intends to maintain high compatibility with MySQL, ensuring a drop-in replacement capability with library binary equivalency and exact matching with MySQL APIs and commands" according to Wikipedia. You can do blind SQL injection on MySQL, so why shouldn't you be able to do it on MariaDB?
In fact, the ability to do any sort of SQL injection is a vulnerability in the application and not in the database. So your choice of SQL database shouldn't really matter for this.
But anyway, let's say that the person who told you this is right (which they aren't). Would that mean you don't have to use PDO or prepared statements? No, no, no, a thousand times no. What about ordinary (non-blind) SQL injection? That is even more dangerous!
Long story short, just use PDO or prepared statements.