2 ms·
Parameterized queries - gist of it is it stops you concatenating a bunch of your and their strings together to form your SQL statement.
by benologist 15y ago
Parameterized queries - gist of it is it stops you concatenating a bunch of your and their strings together to form your SQL statement.
- joubee 15y agocodinghorror.com: Give me parameterized SQL, or give me death http://www.codinghorror.com/blog/2005/04/give-me-parameterized-sql-or-give-me-death.html http://www.codinghorror.com/blog/2005/04/give-me-parameteriz... I have fairly strong feelings when it comes to the stored procedures versus dynamic SQL argument, but one thing is clear: you should never, ever use concatenated SQL strings in your applications. Give me parameterized SQL, or give me death. There are two good reasons you should never do this. [I need to spend some time looking at this - tyvm benologist]
- jordhy 15y agoPrecisely. I use obfuscated store procedures.