refactored all of the sql to use parameterized queries (per https://github.com/brianc/node-postgres/wiki/FAQ) because the previous approach of concatenating input from the frontend form controls was flagrantly vulnerable to sql-injection (...my naivety)
refactored all of the sql to use parameterized queries (per https://github.com/brianc/node-postgres/wiki/FAQ) because the previous approach of concatenating input from the frontend form controls was flagrantly vulnerable to sql-injection (...my naivety)

spaceshipoperator/redshirts