11 ms·
People don't use ORMs there? Those are great tools and you can always use raw sql in exceptional cases
by tester756 5y ago
People don't use ORMs there?
Those are great tools and you can always use raw sql in exceptional cases
- GuB-42 5y agoUse an ORM if you want but parameterized queries work just as well preventing SQL injections ORMs are a heavyweight, something that is fundamental in your design. Parameterized queries are just regular SQL queries, but safer.
- AtNightWeCode 5y agoAll queries must in the end be parameterized I would say. Both for security and performance reasons.