Back

Fix Database Query Not Using Prepared Statements

Problem

Queries are constructed by string concatenation, vulnerable to SQL injection.

Code Editor