Comment by jddj

One of the things I appreciate about pocketbase is GG's attention to detail with respect to security.

Is the string interpolation straight into the sql from the query string in your getting started docs (https://trailbase.io/getting-started/first-ui-app) safe? It smells a bit.

From a quick look (on mobile) I can see that the function takes parameters, but you're not using that.