@thomasfuchs @h5e also I vaguely remember that at least one quite popular SQL library for Node.js by default for some unfathomable reason interpolated queries on client instead of running them as parametrized queries; even when the way you called that library looked like parametrized queries.