3 ms·
As long as you don't want your queries parameterized/precompiled and inputs escaped, rolling your own SQL by hand should work.
by twistedpair 11y ago
As long as you don't want your queries parameterized/precompiled and inputs escaped, rolling your own SQL by hand should work.
- EugeneOZ 11y agoDo you really think I use non-escaped queries? :) Really funny :) Read about prepared statements.
- twistedpair 11y ago> "queries parameterized/precompiled and inputs escaped" Yep. That's exactly what I was talking about. You know that's what prepared statements do, right?
- EugeneOZ 11y agoYes, I know, and I use them in raw queries.