Can I avoid sql injection in sqlite fts replacing quotes?
Here is my sql in cpp: boost::format("select Rowid from Name where Idx match '%s'") % key Is it safe to prevent injection by filtering quotation...
Step In To The Knowledge World
Here is my sql in cpp: boost::format("select Rowid from Name where Idx match '%s'") % key Is it safe to prevent injection by filtering quotation...
