On: Go programming language secure coding practices guide

[floatboth]

OMG. How would escaping be faster than prepared statements if prepared statements are literally cached in the database server instead of re-parsing and re-planning every time?! o_0

[mohaine → floatboth]

To be fair, it can be faster if the binds cause the plan to be much more efficient. I've had to remove binds before for this very reason.

Note that this was exactly once in 20 years.

[tyingq → floatboth]

It happens. https://bugs.mysql.com/bug.php?id=73056