Sql, Nodejs, Security.
dangerous is because a user could supply us with the following value: Bobby T"; DROP TABLE table; -- As you can see a malicious user has broken our assumption! The provided string is obviously not a valid name. After the user-supplied string has been concatenated with our query string, we’re left