ivanvpenchev/Mojoforum — Issue #5: DBI Placeholders.
Author: marcusramberg
Created: 2011-12-16 09:25:23+00:00
State: open

Hi.
Just noticed you use string interpolation in your SQL statements. You really should be using placeholders instead to avoid sql injection attacks. See the example at

https://metacpan.org/module/DBI#do (using ? in your statement, and adding the variables after).