WP-A: A New URL Shortener

Thomas 'PointedEars' Lahn PointedEars at web.de
Thu Mar 17 19:17:47 EDT 2016


Daniel Wilcox wrote:

> Cool thanks, highly recommended to use an ORM to deter easy SQL
> injections. 

That is to crack a nut with a sledgehammer.  SQL injection can be easily and 
more efficiently prevented with prepared statements.  While an Object-
Relational Mapper (ORM) can use those, and there are benefits to using an 
ORM, avoiding SQL injection should not be the primary reason to use an ORM.  
In fact, using an ORM is often not only overkill, but effectively *reduces* 
application performance.

-- 
PointedEars

Twitter: @PointedEars2
Please do not cc me. / Bitte keine Kopien per E-Mail.



More information about the Python-list mailing list