3 ms·
> That's like saying SQL is crap because you need to build queries by hand If we want to use these terms, then SQL is indeed crap, because you need put query p
by jwr 4y ago
> That's like saying SQL is crap because you need to build queries by hand
If we want to use these terms, then SQL is indeed crap, because you need put query parameters in-band instead of out-of-band. This led to numerous exploits over the years, as it's difficult to ensure the data is correctly escaped. GraphQL just repeated the same mistakes.
- zokier 4y agohttps://graphql.org/learn/queries/#variables https://graphql.org/learn/queries/#variables ?
- chpmrc 4y agoCalling SQL crap just because there's a way to abuse it is like saying C is crap because I could do `int * userGuess = get_number_from_user(); * userGuess;` with nothing more than a compiler warning (if I'm lucky). Would be nice if we all stopped with these blanket statements and just focused on evaluating individual pros/cons of things. EDIT: formatting of pointer