HackerTrans
TopNewTrendsCommentsPastAskShowJobs

sqliwtf

no profile record

comments

sqliwtf
·vor 4 Jahren·discuss
That’s the kind of thing you say to ship a product to market, to eschew a non-critical feature.

Parametrized Queries for a SQL library are a critical “do not ship without” feature. You do not lie and tell your user you have a safe product causing them to have a compromised system.

I hope to God you are not creating production systems anywhere.