3 ms·
I am betraying my ignorance with this question, but: On the last page, the authors claim that SQL queries are commonly constructed by concatenating strings. Was
by WallWextra 8y ago
I am betraying my ignorance with this question, but:
On the last page, the authors claim that SQL queries are commonly constructed by concatenating strings. Was this still, in fact, common in 2017? If it was, that's very scary.
- wonthegame 8y agohttps://docs.oracle.com/javase/tutorial/jdbc/basics/processingsqlstatements.html https://docs.oracle.com/javase/tutorial/jdbc/basics/processi... Seems so.
- daotoad 8y agoInjection is the #1 class of bug in the OWASP top 10 for 2017. https://www.owasp.org/index.php/Top_10-2017_A1-Injection https://www.owasp.org/index.php/Top_10-2017_A1-Injection Is there any escape?