3 ms·
Bound parameters were a new thing like 15 years ago. When they were new depends on what language and database library you use. Perl's DBI had them 25 years ag
by btilly 6y ago
Bound parameters were a new thing like 15 years ago.
When they were new depends on what language and database library you use.
Perl's DBI had them 25 years ago.
- AdamN 6y agoDear lord I'm getting old ... :-)
- kstrauser 6y agoThough my creaking bones are weary, Yet I shall prepare this query.
- tomc1985 6y agoProbably; I vaguely remember them being discussed at my very first programming job around mid 2000's, which was writing Perl
- tharkun__ 6y agoI definitely fixed up some very SQL injectiony code somewhere between 2006-2008 in Perl.
- banana_giraffe 6y agoAnd Visual Basic itself had them 23 years ago as well. Though, the inflection point, at least in my circles, was in 1998, when rain.forest.puppy talked about "piggy backing" SQL commands. Even there they mentioned using parameters with stored procedures to protect yourself. It's just clear no one in IIS land did at the time, so there was a wide open exploit playground for everyone that saw that release of Phrack, once they got done playing with directory traversal exploits.