4 ms·

Would be it interesting to know why the name had to be changed?

• klodolph 6y ago
  Because there are a bunch of companies which do aggregation of information about companies, and not all of them used parameterized SQL queries :-/
  • fennecfoxen 6y ago
    This is HTML injection, not SQL.
    • klodolph 6y ago
      That’s kind of a minor detail.
  • NullPrefix 6y ago
    And who's problem is that?
    • ceejayoz 6y ago
      On a "what's reasonable" level, or on a "gets you called in by a minister or MP to be yelled at" level?
      • ygjb 6y ago
        Solidarity to all of the folks who have had to work with elected officials. I got ripped a new one because I recommended we disable a PHP project in the mid-2000s because a hay bale reporting app (report counts of bay hales on farms) due to an RCE bug. Within a few hours of the app being disabled there was drama from a politician who got a phone call from a prominent farmer...
        • r-w 6y ago
          Speaking of the power of farmers… https://youtu.be/rStL7niR7gs?t=439 https://youtu.be/rStL7niR7gs?t=439 The relevant clip is just 20 seconds long.
          • emmelaich 6y ago
            That is excellent. Relevant - John Mellencamp using his hit song to siphon off subsidies to his family and relatives. https://reason.com/2005/04/15/cash-on-the-scarecrow-pork-on/ https://reason.com/2005/04/15/cash-on-the-scarecrow-pork-on/
  • ironmagma 6y ago
    Not even all SQL engines support quoting all types of values. BigQuery, looking at you.