1330
#NULL! (lemmy.world)
you are viewing a single comment's thread
view the rest of the comments
[-] thesystemisdown@lemmy.world 6 points 2 days ago

I know what I'm dealing with when I see a query that isn't using a prepared statement.

[-] jaybone@lemmy.zip 2 points 2 days ago

I mean a prepared statement is still created with a string.

But you definitely want to be using bind parameters with your prepared statements. Not only for security but also potentially performance improvements.

this post was submitted on 25 May 2026
1330 points (99.2% liked)

Programmer Humor

31585 readers
1239 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 3 years ago
MODERATORS