4 ms·
>If you've been programming and using SQL for a few years, it's not a problem. Years of SQL injection mitigation don't agree with you. Are you sure you just do
by nemothekid 11y ago
>If you've been programming and using SQL for a few years, it's not a problem.
Years of SQL injection mitigation don't agree with you. Are you sure you just don't prefer it because you are familiar with it?
- popmystack 11y agoIt's almost as if constructing SQL queries by concatenating strings from user input is a bad idea. I don't see how using vanilla mongo in the same fashion would solve the blight you have placed on SQL.
- nemothekid 11y agoIn Mongo, `db.findOne({"username":"$_GET["name"], "password":$_GET["password"]})` won't open your database to the public. While SQL is a powerful language, the article is right. Mongo query language is useful enough to easily give application developers a place to query and store data without giving them enough rope to hang themselves.