Is SQL Injection prevention built into this great package? - Githubissues

CraZySacX / node-jdbc

JDBC Wrapper for node.js

140 stars 106 forks source link

Is SQL Injection prevention built into this great package? #166

Closed ngwwm closed 6 years ago

ngwwm commented 6 years ago

Is SQL Injection prevention built into this great package?

juvation commented 6 years ago

yes - as long as you use PreparedStatements with question marks for your values. ie, use the JDBC API as intended, and don't substitute values into SQL yourself.

CraZySacX commented 6 years ago

To expand on the previous comment, prevention is not built in directly to the library, however if used as described above you will be protected.