3 ms·
I've seen plenty of web sites running 10+ year-old code written by someone's neigbor's kid with an ancient PHP handbook in hand. Luckily, deprecating the mysql
by ahje 8y ago
I've seen plenty of web sites running 10+ year-old code written by someone's neigbor's kid with an ancient PHP handbook in hand. Luckily, deprecating the mysql extension in PHP in favor of the mysqli extension has broken a _lot_ of ancient code like that.
- raesene9 8y agoYeah PHP has been a rich source of SQLi issues in the past, but it can crop up anywhere. I've seen it most languages/database engines and even where an ORM is in play (e.g. ActiveRecord in rails) you can get it with bugs in the ORM implementations.