yes Florian, it is bad practice because you are leaving a door for SQL injection.
There are better approaches such as, executing stored procedures, using parametized inputs, etc.
hope you agree on that one
yes Florian, it is bad practice because you are leaving a door for SQL injection.
There are better approaches such as, executing stored procedures, using parametized inputs, etc.
hope you agree on that one