← Back to context

Comment by abustamam

11 hours ago

Most ORMs I've worked with have a special method that lets you write raw SQL. Probably not the most ergonomic way, but it is an escape hatch. Which ORM were you using?

Most teams I've been on will automatically reject a PR writing raw sql due to maintainability concerns. I would never consider it in a professional context unless it can be done in a way that guarantees it is easy to maintain without using concatenation.

Most ORMs don't have the SQL tools we did to sanitize variables when putting them into queries. Some do, but not all.