# Why SQL template tags are not vulnerable to SQL injection attacks

DevFeed: [Why SQL template tags are not vulnerable to SQL injection attacks](<https://devfeed.tech/articles/why-sql-template-tags-are-not-vulnerable-to-sql-injection-attacks-5800.md>)

Original publisher: [Read original article](<https://neon.com/blog/sql-template-tags>)

Author: Mahmoud Abdelwahab

Published: 2023-05-09T10:56:34Z

Content type: article

Language: en

Sources: [Blog -- Neon Docs](<https://devfeed.tech/sources/blog-neon-docs.md>)

Topics: [SQL](<https://devfeed.tech/topics/sql.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Security](<https://devfeed.tech/topics/security.md>), [Serverless](<https://devfeed.tech/topics/serverless.md>), [Databases](<https://devfeed.tech/topics/databases.md>), [Query (disambiguation)](<https://devfeed.tech/topics/query.md>)

Tags: [article](<https://devfeed.tech/tags/article.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [code](<https://devfeed.tech/tags/code.md>), [community](<https://devfeed.tech/tags/community.md>), [edge](<https://devfeed.tech/tags/edge.md>), [postgres](<https://devfeed.tech/tags/postgres.md>), [security](<https://devfeed.tech/tags/security.md>), [security-vulnerabilities](<https://devfeed.tech/tags/security-vulnerabilities.md>), [serverless](<https://devfeed.tech/tags/serverless.md>), [sql](<https://devfeed.tech/tags/sql.md>), [validation](<https://devfeed.tech/tags/validation.md>)

## AI overview

The article explains why SQL template tags are not vulnerable to SQL injection attacks. It contrasts unsafe string interpolation, which can let attackers alter queries and cause data loss, with parameterized queries that safely sanitize and bind values. It also discusses the @neondatabase/serverless driver, Postgres clients, and use in serverless and edge environments.

## Source excerpt

SQL injection is one of the most well-known security vulnerabilities, allowing attackers to manipulate database queries and potentially gain unauthorized access to sensitive data. However, using our serverless driver, you can continue to write queries as you always have, but feel...