3 ms·
> Personally I write JavaScript daily, and I've never seen this feature being used. I see it be used for SQL specifically in loads of projects. https://www.np
by paulddraper 3y ago
> Personally I write JavaScript daily, and I've never seen this feature being used.
I see it be used for SQL specifically in loads of projects.
https://www.npmjs.com/package/sql-template-strings https://www.npmjs.com/package/sql-template-strings
https://www.npmjs.com/package/squid https://www.npmjs.com/package/squid
> will this create a prepared statement or insert a correctly escaped value into the SQL string?
Always prefer server-side parameterization. If you are referring to java.sql.PreparedStatement specifically, that requires a connection, so this is only an intermediate value to creating that.