3 replies

Is ilike vulnerable to SQL injections?

import { ilike } from "drizzle-orm";

const userInput = "asdf";
db.select().from(table).where(ilike(table.column, `%${userInput}%`));

import { ilike } from "drizzle-orm";

const userInput = "asdf";
db.select().from(table).where(ilike(table.column, `%${userInput}%`));

Is ilike vulnerable to SQL injections? - Drizzle Team