Glossary term
What is parameterised query? Meaning for developers
parameterised query stands for Parameterised query (prepared statement).
A query where the SQL text and the values are sent separately, so a value can never change the meaning of the SQL.
Learn it properly · Security for DevelopersLesson 1: Injection: SQL Injection, Command Injection and How to Stop ThemA real SQL injection on a tiny login, then the fix with parameterised queries. Also command injection, NoSQL injection and the rule behind all of them: never mix data into code.