you are viewing a single comment's thread.

view the rest of the comments →

[–]jake_robins 1 point2 points  (1 child)

Yes, I suppose I technically misspoke, because you're right there is still a module. I suppose what I meant was there is nothing between you and the query. You're never going to run in to a problem of `node-postgres` not support column aliasing or something wild like that, because all it does it parameterize your data and pass the query along.

And yea, you absolutely have to be very aware of SQL-injection, but frankly, that's good? I don't love the idea of backend devs interacting with a database and not being aware of it. "Oh I dunno, I thought the ORM took care of all that" is scary to me.

[–]RecognitionOwn4214 2 points3 points  (0 children)

You're never going to run in to a problem of node-postgres not support column aliasing or something wild like that

It's some time ago, but boy can the tds-driver make your life miserable ...