• @3rdBlueWizard
    link
    English
    21 year ago

    Technically, a parameterized query is just doing sanitization for you. Or does escaping not count as sanitizing?

    Although nothing wrong with sanitizing yourself then using parameterized queries. Never know if the API has a bug.