3 ms·
Even better is to whitelist all SQL than runs on the database using prepared statements. Anything else is a hack.
by JetSpiegel 8y ago
Even better is to whitelist all SQL than runs on the database using prepared statements. Anything else is a hack.