25 ms·
Hm, even doing SQL parameterization the wrong way (with dumb string joins), it shouldn't be an issue on its own. The real issue is names like O'Connell.
by hot_gril 3y ago
Hm, even doing SQL parameterization the wrong way (with dumb string joins), it shouldn't be an issue on its own. The real issue is names like O'Connell.
- rpigab 3y agoI know, the quotes must be there and will ignore anything inside, but with SQL misuse, you never know! Someone is probably using it in a worse way than any sane person would think possible.