4 ms·
using parameterized statements is sanitizing inputs into the database.
by ehutch79 5y ago
using parameterized statements is sanitizing inputs into the database.
- kevincox 5y agoThe database is "outside" of your application server. You communicate with the database using statements and when you get the value back from the database it is unchanged. The encoding was just for transfer, no data has actually been changed.