Comment Comment by MattPalmer1086 This is absolutely the best mitigation for SQL injection.It can also speed up your queries as it allows better caching of the query plan.It always annoys me when SAST products on detecting injection advise using better input validation. No! Use parameterised queries and be done with it. parent MattPalmer1086 5 years ago
It can also speed up your queries as it allows better caching of the query plan.
It always annoys me when SAST products on detecting injection advise using better input validation. No! Use parameterised queries and be done with it.