3 ms·

So what to you do if you need to make a sql call based on user input?

• gnud 8y ago
  Use parameters, of course. Using SQL parameters for untrusted input is the only sane way to avoid SQL injections.