diff --git a/ExistingProjects/ERPNext.mdwn b/ExistingProjects/ERPNext.mdwn index 7dec20763e346c9f845bc9db610f284e6fca10b8..5aa96b772bec20b881362917c6250b36138dfc5f 100644 --- a/ExistingProjects/ERPNext.mdwn +++ b/ExistingProjects/ERPNext.mdwn @@ -15,7 +15,7 @@ The python code does not follow the guidelines in [PEP8](http://www.python.org/d #### Database -wnframework contains a database model abstraction which is used in some places, though there are > 2000 places where raw SQL is composed using python's `'foo %' % ('bar')` string formatting. I have managed to cause some minor SQL injections, I have not yet found any places where I can cause significant damage / data loss. +wnframework contains a database model abstraction which is used in some places, though there are > 2000 places where raw SQL is composed using python's `'foo %s' % ('bar')` string formatting. I have managed to cause some minor SQL injections, I have not yet found any places where I can cause significant damage / data loss. Not using a database abstraction model such as SQLAlchemy reduces storage portability and adds security overhead to ensure that no malicious queries can be executed.