Post #1768967
2026-03-01 23:39 UTC
@bohwaz true, and I think SQLite has some really cool features like that… personally I’m trying get MySQL and MariaDB to implement a very simple `WHERE id IN (?)` with a single placeholder for multiple values, as I still keep seeing people `implode(‘, ‘, $ids)` directly into the SQL string for some of that SQL Injection fun :-)
Replies (1)
-
@bohwaz@mamot.fr 2026-03-01 23:43
@craigfrancis I'm personally using a custom ?? placeholder for this case. And I use implode, but before the call I'm quoting each value :)