3 ms·
Yes, I'm really talking about using libraries that let you pass parameters into a statement, and have some level of protection against injection.
by skrtskrt 6y ago
Yes, I'm really talking about using libraries that let you pass parameters into a statement, and have some level of protection against injection.
- dnautics 6y agoI was just reacting to this, which is confusing given your response. > In Go I just write the raw SQL. But in general I agree with you about ORMs (I do not use them). I'm just pointing out that when the easiest/most popular library to reach for to protect yourself against injection is an ORM, it's understandable to use it.