in reply to Re: Placeholders in SQL query
in thread Place holders in SQL query
I don't see why you'd need placeholders here.
Someday someone will (accidentally?) stuff an untrusted value into the variable that's being interpolated. Or a bad value will somehow get into the database.
Don't forget placeholder-usage comes with a price.
Optimizations should be reserved for later, when benchmarking shows the problem is in the query.
Placeholders are a good idea.
|
|---|