Hacker News new | ask | show | jobs
by stephenr 2904 days ago
They actively refuse to use parameterised sql queries, opting for their own home baked userland implementation instead.