3 ms·
Author is confusing prepared statements with parameterized queries/escaping in one of the first points. Prepared statements are not related to sql injections, i
by mirekrusin 9y ago
Author is confusing prepared statements with parameterized queries/escaping in one of the first points. Prepared statements are not related to sql injections, ie. you can build them from interpolated strings as well.
- wheresvic1 9y agoYes you are correct there. In the context of Node.js and using the mysql package, prepared statements do the job :)