3 ms·
What is needed are modern dev tools that can automate away some of these boilerplate issues...something like this: http://www.codesolvent.com/static-assets/gif-
by Edmond 9y ago
What is needed are modern dev tools that can automate away some of these boilerplate issues...something like this: http://www.codesolvent.com/static-assets/gif-studio/datastatement/shot.webm http://www.codesolvent.com/static-assets/gif-studio/datastat...
It forces parameterization on all queries, you'll have to go out of your way to create a statement that doesn't parameterize it's inputs.
Disclosure: I am the developer of Solvent.
- geekamongus 9y agoTool are good to assist, but a fundamental understanding of SQLi and how to prevent it are imperative for developers to understand.
- Edmond 9y agoAgreed, knowing the fundamentals is always preferable...but that is unfortunately a high-bar for most "developers" so it is better to have solutions with builtin guardrails.