3 ms·
> SQLite doesn't really enforce column types[0], the choice is really puzzling to me. It's not the worst thing in the world; you're validating on data ingest a
by dnautics 6y ago
> SQLite doesn't really enforce column types[0], the choice is really puzzling to me.
It's not the worst thing in the world; you're validating on data ingest anyways to prevent sqli, for example, right?
- Sohcahtoa82 6y agoData validation is a dangerous method to try to prevent SQL injection. The only surefire method is to used parameterized queries, which you should be doing anyways.
- dnautics 6y agohuh? By data validation I mean a validation library in your surrounding PL, it's flowing through the types of that language, and at no point is unprepared SQL entering your system.