Unverified50% confidenceCautionExact time
Supabase client built-in methods rather than string-concatenated SQL should be used to prevent SQL injection.
1
Sources
50%
Confidence
Long-term
Relevance
9/27/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe principle of SQL injection is that an attacker inserts malicious SQL statement fragments into user input fields; when the backend directly concatenates user input into database query statements, it is executed by the database engine, leading to data leakage, authentication bypass, or even database write operations.67% similarUnverifiedWith the Supabase integration, Bolt.New can automatically create database table structures and write query logic through AI, so developers do not need to write SQL statements manually.66% similarUnverifiedIn SQL Server and PostgreSQL, the STRING_AGG function can be used to perform string aggregation operations.65% similarUnverifiedThe project's architecture requires the business layer to refrain from writing SQL directly, with all database queries encapsulated in the DB Query layer, achieving strict separation between the business layer and the data layer.65% similarUnverified提示注入与SQL注入漏洞存在结构类比：后者利用数据库无法区分SQL代码与数据字符串，前者利用LLM无法区分元指令与被处理内容65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/953164API
curl https://kongchang.com/api/v1/knowledge/claims/953164MCP
get_claim(id=953164)