[edoceo]

Parameter-ized query builders are possible in every SQL library.

String escaping SQL? How is anyone thinking that is still a thing in 2017? The problem has been solved for two decades

[EGreg]

Not just that, but they are great for sharding too.

[jacquesm]

I'm not following you, how so?