2 ms·
Member.execute(String.format("DELETE FROM %s WHERE name = 'Mary'", Member.TABLE_NAME)); That String.format looks dangerous, especially in a DELETE. Sure, it's
by WorldMaker 6y ago
Member.execute(String.format("DELETE FROM %s WHERE name = 'Mary'", Member.TABLE_NAME));
That String.format looks dangerous, especially in a DELETE. Sure, it's a constant in this instance, but other examples use a parameterized ?, so this String.format jumps out.