3 ms·
http://rosettacode.org/wiki/Parametrized_SQL_statement http://rosettacode.org/wiki/Parametrized_SQL_statement But no, seriously, you should be using a library
by cjzhang 15y ago
http://rosettacode.org/wiki/Parametrized_SQL_statement http://rosettacode.org/wiki/Parametrized_SQL_statement
But no, seriously, you should be using a library or something that sanitizes your SQL queries for you. If you aren't constructing the query string yourself, you should be okay.