5 ms·
I don't think we disagree. Developers should know about these issues and no framework will ever truly protect you from these kinds of mistakes. The question is,
by numbsafari 14y ago
I don't think we disagree. Developers should know about these issues and no framework will ever truly protect you from these kinds of mistakes. The question is, I think, is ActiveRecord an ORM that properly mitigates these issues.
Anecdotally, it seems to have recurring problems with SQL injection.