3 ms·
At least in PostgreSQL you can use binary parameters: http://www.postgresql.org/docs/9.0/static/libpq-exec.html http://www.postgresql.org/docs/9.0/static/libpq-
by wulczer 16y ago
At least in PostgreSQL you can use binary parameters: http://www.postgresql.org/docs/9.0/static/libpq-exec.html http://www.postgresql.org/docs/9.0/static/libpq-exec.html
Of course that does not help if you construct the entire query string as text before sending it to the server, which is how SQL injection most commonly happens.