Hi all, Is there a preferred way for escaping stri...
# suitescript
m
Hi all, Is there a preferred way for escaping strings you are using inside an SQL statement with SuiteQL?
e
I write all my SuiteQL statements as template literals
j
same here
m
@erictgrubaugh but this doesn't espace strings, right?
e
What needs to be escaped? Do you have an example query?
m
No, my manager asked us to stop using N/search, and rely on N/query, the case I worked on didn't need any escaping. I am just asking because it is a common practice in development in general.
j
It’s probably foolish of me to assume that NS does checking for SQL injection within the N/query module