|
|
|
|
|
by clarry
4276 days ago
|
|
> This is the same basic mistake of using a bunch of string concatenation to build queries for your database. Not at all. The string as a query is expected to execute. Environment variables in general are just data and not expected to be executed, even if some of them have special semantics and may indeed be executed. |
|