3 ms·
Sounds dangerous!
by bbcbasic 9y ago
Sounds dangerous!
- atemerev 9y agoNo more than DELETE FROM ... WHERE ... wait, where is WHERE?
- philsnow 9y agoEven this can be made safe(r) if you only only only connect to your database nthrough a proxy that sanitizes queries. IIRC vitess adds an implicit LIMIT 10 to queries that don't have a limit.
- cdmckay 9y agoA simple solution is to not allow UPDATE or DELETE statements without a WHERE clause.