potoooooooo 🥔@lemmy.world to Programmer Humor@programming.devEnglish · 3 days ago#NULL!lemmy.worldimagemessage-square92linkfedilinkarrow-up11.34Karrow-down111
arrow-up11.32Karrow-down1image#NULL!lemmy.worldpotoooooooo 🥔@lemmy.world to Programmer Humor@programming.devEnglish · 3 days agomessage-square92linkfedilink
minus-squarethesystemisdown@lemmy.worldlinkfedilinkEnglisharrow-up6·2 days agoI know what I’m dealing with when I see a query that isn’t using a prepared statement.
minus-squarejaybone@lemmy.ziplinkfedilinkEnglisharrow-up3·2 days agoI mean a prepared statement is still created with a string. But you definitely want to be using bind parameters with your prepared statements. Not only for security but also potentially performance improvements.
I know what I’m dealing with when I see a query that isn’t using a prepared statement.
I mean a prepared statement is still created with a string.
But you definitely want to be using bind parameters with your prepared statements. Not only for security but also potentially performance improvements.