Hacker News new | past | comments | ask | show | jobs | submit login

http://rosettacode.org/wiki/Parametrized_SQL_statement

But no, seriously, you should be using a library or something that sanitizes your SQL queries for you. If you aren't constructing the query string yourself, you should be okay.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: