Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That’s what I meant by parameterized queries.

But composing strings together to forge a SQL query (outside the inputs) is generally a terrible, no-good, awful job. E.G. optionally adding filters to a query.

Largely because the SQL language itself does not compose well, due to its general inconsistency in just about every expression, and it’s awkward/unnecessary strictness in things as simple as SELECT/FROM/WHERE order and evaluation order



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: