Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

In most languages ecosystems I've used have paramatized queries or prepared statements which do this anyway...


Almost all, except the old php mysql interface. Unfortunately, that happened to become one of the most popular and influential ones.


It was removed in newer PHP versions in favor of mysqli/mysqlnd/PDO which makes prepared statements dead simple.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: