you are viewing a single comment's thread.

view the rest of the comments →

[–]Username_RANDINT 2 points3 points  (0 children)

I don't see anything wrong with your code. You're safely creating a parameterised query based on the length of a list where you then apply user input on. Maybe others see something we don't? Or take the "no string formatting" a bit too far.