SQL injection

[busslina]

Is this code secured against SQL injection?

'SELECT * from auth.users WHERE username = @username AND password = @password'

[isoos]

As long as you are using parameters with the query, it should be secure (these are sent separately).

[busslina]

Cool. Thanks