elomatreb 🚂 on Nostr: the problem is that there are lots of different ways you can interpolate stuff in a ...

the problem is that there are lots of different ways you can interpolate stuff in a query, and it's easy to miss one in your escaping attempt. The proper solution is what's called "parameterized" queries that separate the query from the data on a protocol level which means you don't need to do any escaping and there is no risk of confusion