17 ms·HTML injection, yes. SQL injection, no. The insert is parameterized.by klodolph 4y agoHTML injection, yes. SQL injection, no. The insert is parameterized.cirrus3 4y agoOk, I wasn't sure if DB.exec_params handled that