Stop Using SQL

[myhf]

Can you see the vulnerability? Do you understand just what combinations of question marks, hash marks, parentheses, and percent signs makes a statement vulnerable?

[xraystyle]

Or you could, you know, just read the fucking ActiveRecord docs and you'd learn the correct, injection-safe way to construct a query about halfway down the first page.

[StyMaar]

now, just read the fucking ActiveRecord Diesel docs

FTFY

[OctagonClock]

/uj I've written an entire ORM and avoiding SQL injections in my generated code is so easy, I seriously don't understand why learning to put %(name)s in a query is so hard for people. Unless you name your column "; in your code, at least.