title: "Injection" concerns for Cypher over REST
body: <p>I was wondering if there is a concern for query injection when I query over REST? </p>
  
  <p>Parameterizing the query definitely makes things more cleaner but I was also able to query with string concatenation to manipulate properties and labels. </p>
  
  <p>I find the latter approach being more flexible because at times I can't query the way I want it following the paradigm of parameters. (<a href="https://stackoverflow.com/questions/24211261/can-i-parameterize-labels-and-properties-on-create-or-set-rest-and-transaction">Can I parameterize labels and properties on CREATE or SET? (REST and transaction)</a>) </p>
  
  <p>If there is no worries of some sort of injection is it a security risk to concat query strings? I personally do not have too deep of an understanding in querying Neo4j so I want to have my options open and willing to try any suggestions.</p>
  
  <p>EDIT: After reading Wes's comment. I'd like to ask the viewers to quickly glance at the posted link. What about those situations where I want to use Where and Set ? What would be the best way to parameterize?</p>
  
  <p>Thank you!</p>