01.07.2020, 15:11
(This post was last modified: 01.07.2020, 15:16 by Quarchodron.)
Actually active record use name of fields in building query. So IT worka another way. Problem is in building query other way than from model. Using query() u have to be aware that if u make mistake u will get error. Every modern orm Using that in that way. You get more possible ways to build a query. Ofc. You csn do some damage. But in future of this orm probably user will not use query builder seperate from active record at all. To remove SQL injection u have to Just use builded function grom module.