Using parameter in LIKE

Is it safe to pass a string directly into a like condition, or does it have to be quoted or parameterized somehow?
where(like(entries.text, `%${filters.search}%`))
where(like(entries.text, `%${filters.search}%`))
2 Replies
kangkang
kangkang7mo ago
It will be parameterized.
ciscoheat
ciscoheatOP7mo ago
Nice, thank you
Want results from more Discord servers?
Add your server