DEV Community

Discussion on: What is SQL injection and how do I avoid it in Go?

Collapse
 
joncalhoun profile image
Jon Calhoun

This post was originally written in the context of Postgres, and as I understand it each driver defines its own set of argument placeholders (see github.com/golang/go/issues/3602), which is why this post only really covers $1.

I'll see if I can tweak the post to make it clearer that we are referring to Postgres here and that other drivers use different placeholders.

Collapse
 
tgulacsi profile image
Tamás Gulácsi

Sorry, I can't find the word "placeholder" in the article. That's my concern, not postgres or whatever.

Thread Thread
 
joncalhoun profile image
Jon Calhoun • Edited

I just realized I didn't show an example of using placeholders in this article. My original draft did so not sure how it got dropped. That is why I mentioned $1 in the comment. I'll update this shortly with more context and thanks for pointing it out!

Edit: Done. Is that clearer now?