Hacker News new | ask | show | jobs
by babuskov 3100 days ago
Yeah, before using any ORM I always first check how it inserts the parameter values. If it's a string replacement, you need to be very careful.