4 ms·
>prepareQuery("SELECT something FROM table WHERE col='"+userInput+"' and otherCol=?", otherUserInput); This is very dumb, yet too common. :-/
by 0x4a42 11y ago
>prepareQuery("SELECT something FROM table WHERE col='"+userInput+"' and otherCol=?", otherUserInput);
This is very dumb, yet too common. :-/