jrconlin/bipostal_store — comment on commit 2dae36be316bc981cfeb29055958e1fdd21f4f17
File: bipostal/storage/mysql_memcache.py line 40
By jrconlin:

I was unable to find references for parameterized statements using python's wrapper. Although this looks promising: http://stackoverflow.com/a/775399 . Since this is data originating from outside, i don't trust it. I will still perform escapes unless I know for certain that this call handles quotes and other elements properly.