[lyu07282]

I would argue if you sanitize your input you are already doing it wrong, you should parameterize queries and send the data entirely separately from code.

[swasheck]

from a certain perspective, parameterization could be seen as sanitation, no?

[bewaretheirs]

If it sanitizes anything, parameterization sanitizes the code, not the data, and has much lower impact on the outside world (because the rest of the world isn't pressured to rename things in the real world to fit arbitrary constraints in the computer).