Stored procedures are really not used enough. They’re incredibly useful, and not just for security.
People can make out-of-band updates to the query, like making it more efficient or migrating it, without requiring any changes to the all.
People can make out-of-band updates to the query, like making it more efficient or migrating it, without requiring any changes to the all.
It is quite possible to test stored procedures, it's just requires some additional work/infrastructure.
That’s not a rag on stored procedures more generally. Just that specific use case scales poorly to a large number of operations as its inherently cpu bound.
A simple sha256(lower(email)) is equally secure as a complete random salt, the only requirement on a salt is to be unique.