3 ms·
> mean to 100% prevent SQL injection I'm curious what sort of injection gets past parameterized queries they talk about in your master's degree.
by jldugger 7y ago
> mean to 100% prevent SQL injection
I'm curious what sort of injection gets past parameterized queries they talk about in your master's degree.
- danielbarla 7y agoMy guess would be that this was a mis-quote, probably meant to be "there's no way to 100% prevent SQL injection via sanitization". Possibly followed by advice to use parametrized queries. Alternatively, the lecturer could have just been wrong. If someone does have a counter example for parametrized queries, I'd be curious.
- DeathArrow 7y agoThat's right, that's what I wanted to say.