"UPDATE table_name SET w = $1, x = $2, y = $4 WHERE z = $3 RETURNING *",
does not do the same as
"UPDATE table_name SET w= $1, x= $2, y = $3, z = $4 RETURNING *",
It’s 2 am and my mind blanked out the WHERE, and just wanted the numbers neatly in order of 1234.
idiot.
FML.
Mostly just safety from yourself/your own little errors in input, but it can’t hurt for sure! Input sanitation is mostly relevant to fend off script kiddies. Relevant xkcd