Re:To ORM or Not to ORM
by megous on Tuesday May 07, 2019 @06:26PM
(#19854011)
ORM builds on top of mechanisms for prepared statements or parametrization.
Yes, ORM API can perhaps limit developers to such an extent, that they can't construct SQL themselves, and thus can't make the mistakes leading to SQL injection.
Yes, ORM API can perhaps limit developers to such an extent, that they can't construct SQL themselves, and thus can't make the mistakes leading to SQL injection.