5 ms·
I actually can’t see how this happens. I can’t even imagine how you could get strings to actually care what the content is. Inserted unsafely in to sql maybe?
by PurpleFoxy 6y ago
I actually can’t see how this happens. I can’t even imagine how you could get strings to actually care what the content is. Inserted unsafely in to sql maybe?
- shakna 6y ago> Inserted unsafely in to sql maybe? Precisely. SQL Injection attacks used to be very, very common. Whilst using parameterized queries today is now hopefully the norm, it was normal at one point to just use string interpolation. And then instead of paramaterizing after you hit your first bug, introducing a function to try and sanitise your strings, but still using interpolation.
- pohl 6y agoWe were young. The world was new. We had a marshaling bug. It’s no great mystery.