5 ms·
the reason I went "quick'n dirty" is for the prototyping nature of the project. But I'll fix this anyway, thanks!
by aw4y 5y ago
the reason I went "quick'n dirty" is for the prototyping nature of the project.
But I'll fix this anyway, thanks!
- robmccoll 5y agoUsing the db Exec / Query / Query row is the same amount of code and effort the fmt.Sprintf statements. Even in quick-and-dirty mock-ups, it's a good idea to not cut corners there.
- Cthulhu_ 5y agoThere's nothing as permanent as a temporary solution. There's been countless SQL injection vulnerabilities exploited over the past decades with the "I'll fix it later" mindset. Start with prepared statements by default, they are not more work than formatting strings.