Use prepared statements
Use prepared statements

Concatenating user input into a SQL query is never advisable. Luckily
the mysql2 library has support for prepared statements. Furthermore, it
will automatically cache it to save on preparation time for the next
time it is run.

https://www.npmjs.com/package/mysql2#using-prepared-statements

unisys12/lorebot12-86