3 ms·
That’s the point. You should never use string interpolation with strings defined at runtime for SQL. Always build your queries out of strings defined at compil
by kuschku 8y ago
That’s the point. You should never use string interpolation with strings defined at runtime for SQL.
Always build your queries out of strings defined at compile time and use them as prepared statements with parameters.
- pjmlp 8y agoThat is the theory, sadly it doesn't work everywhere on the SQL statement. So we always end up with a mix of prepared statements and string manipulation.