Comment Comment by zamalek > escaping strings going into SQLThis is not how you mitigate SQL injection (unless you need to change which table is being selected from or what-have-you). Use parameters. parent zamalek 1 year ago
This is not how you mitigate SQL injection (unless you need to change which table is being selected from or what-have-you). Use parameters.