3 ms·That's what parameterised queries are for. SQL injection isn't hard to avoid.by barrucadu 4y agoThat's what parameterised queries are for. SQL injection isn't hard to avoid.