2 ms·

Is that safe from sqli prospective? It would inject table name and all, which I believe you can't bind...

• ksri 9y ago
  You're right. That's why I said upfront - whitelist values in the userquery object.