3 ms·
Appending strings together for SQL queries (SQL injection just waiting to happen). Passing in user info for a query, instead of using session or token encoded
by beckler 9y ago
Appending strings together for SQL queries (SQL injection just waiting to happen).
Passing in user info for a query, instead of using session or token encoded data (Impersonation just waiting to happen).
Bad passwords/keys, and bad management of those secrets.
No plan for backups, or not having a way to restore backups.