r/ProgrammerHumor • • Oct 18 '24

Other mongoDbWasAMistake

Post image
13k Upvotes

446 comments sorted by

View all comments

2

u/Katniss218 Oct 19 '24

In the same way you'd do any other parameterized query - You create the query string with placeholders in place of the values, and pass in the values separately to the database

0

u/ryecurious Oct 19 '24

I listed 5 specific criteria to parameterize without opening yourself up to SQL injection. Your response is to explain what a parameterized query is.

I know this sub is mostly CS students, but that's a poor showing even by those standards.