Javascript library for building SQL query strings
hiddentao.github.io
hiddentao.github.io
> NOTE: It is recommended that you do NOT create queries browser-side to run on the server as this massively increases your exposure to SQL Injection attacks.
It should be more than recommended against. If you accept SQL built on the client, you should have your keyboard taken away and replaced with one of those little plastic xylophones they give to three year olds.
People should NOT try to stop others from doing stupid things, only warn. After all, we all are responsible adults and we are not idiots.
I can simply write "SELECT a,b,c from table" instead of s.select().from('table').field('a').field('b').field('c').