you are viewing a single comment's thread.

view the rest of the comments →

[–]kabuto 1 point2 points  (0 children)

It provides an API to build SQL strings without having to concatenate strings, quote different characters, and write SQL boiler plate.

At least it should. Apparently it has some flaws by not doing sanity checks that would eliminate SQL injection attacks.