• Enitoni
    link
    fedilink
    English
    211 year ago

    They should use parameterized queries, not sanitization.

    • @3rdBlueWizard
      link
      English
      21 year ago

      Technically, a parameterized query is just doing sanitization for you. Or does escaping not count as sanitizing?

      Although nothing wrong with sanitizing yourself then using parameterized queries. Never know if the API has a bug.