Skip to content
Merged
Changes from 3 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions src/content/docs/d1/worker-api/prepared-statements.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -63,8 +63,9 @@ const stmt = env.DB.prepare("SELECT * FROM Customers WHERE CompanyName = ?").bin

D1 API supports static statements. Static statements are SQL statements where the variables have been hard coded. When writing a static statement, you manually type the variable within the statement string.

:::note
The recommended approach is to bind parameters to create a prepared statement (which are precompiled objects used by the database) to run the SQL. Prepared statements lead to faster overall execution and prevent SQL injection attacks.
:::note[Advantages of prepared statements]
The recommended approach is to bind parameters to create a prepared statement (which are precompiled objects used by the database) to run the SQL. Binding parameters using [`bind()`](/d1/worker-api/prepared-statements/#bind) to prepared statements allows you to efficiently reuse the prepared statement in your code, and prevents SQL injection attacks.

:::

Example of a prepared statement with dynamically bound value:
Expand Down
Loading