I never understood why there even is an api for using a string... Same for SQL statements, single quotes in a query string should generate a warning to just us

I never understood why there even is an api for using a string... Same for SQL statements, single quotes in a query string should generate a warning to just use prepared statements instead :-)