Subj : Separte exec() and query() methods and remove stmt js property
To   : GitLab note in main/sbbs
From : Rob Swindell
Date : Thu May 22 2025 18:03:45

https://gitlab.synchro.net/main/sbbs/-/merge_requests/541#note_7269

Ah, I was hoping Deuce would add his two cents. He has security and usability concerns around user-supplied data potentially used in query parameters. He said this should be 3-5 classes, not one.

The problem with committing the way it is, is: scripts likely would be written to target this API and then we'd have to continue to maintain that backward compatibility (or hear about it from Nelgin). :-) It's better to get the API right the first time, if we can.

---
 þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net

.