performance of parameterized queries for different db's

Posted by tuinstoel on Stack Overflow See other posts from Stack Overflow or by tuinstoel
Published on 2009-08-23T07:54:54Z Indexed on 2010/04/28 20:27 UTC
Read the original article Hit count: 257

A lot of people know that it is important to use parameterized queries to prevent sql injection attacks.

Parameterized queries are also much faster in sqlite and oracle when doing online transaction processing because the query optimizer doesn't have to reparse every parameterized sql statement before executing. I've seen sqlite becoming 3 times faster when you use parameterized queries, oracle can become 10 times faster when you use parameterized queries in some extreme cases with a lot of concurrency.

How about other db's like mysql, ms sql, db2 and postgresql?

Is there an equal difference in performance between parameterized queries and literal queries?

© Stack Overflow or respective owner

Related posts about multiple-databases

Related posts about parameterized