diff --git a/README.md b/README.md index 0b13154fc..e90b95ffb 100644 --- a/README.md +++ b/README.md @@ -284,7 +284,7 @@ Valid Values: true, false Default: false ``` -Allow multiple statements in one query. While this allows batch queries, it also greatly increases the risk of SQL injections. Only the result of the first query is returned, all other results are silently discarded. +Allow multiple statements in one query. While this allows batch queries, it can also greatly increase the damage an SQL injection can do (e.g. by adding `; drop database mysql`). Only the result of the first query is returned, all other results are silently discarded. When `multiStatements` is used, `?` parameters must only be used in the first statement.