Hacker News new | past | comments | ask | show | jobs | submit login

> In other languages you can't get that without using a standard library that will escape the values by default

Not sure what you mean by that. (As far as I know) you can do the same thing in e.g. Python with Flask:

    cursor.execute("SELECT * FROM username_list WHERE %s" % request.form['username'])



Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: