this post was submitted on 25 May 2026
1005 points (99.2% liked)

Programmer Humor

31560 readers
1973 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 2 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[โ€“] thesystemisdown@lemmy.world 5 points 21 hours ago (1 children)

I know what I'm dealing with when I see a query that isn't using a prepared statement.

[โ€“] jaybone@lemmy.zip 1 points 21 hours ago

I mean a prepared statement is still created with a string.

But you definitely want to be using bind parameters with your prepared statements. Not only for security but also potentially performance improvements.