2 ms·
What does string width have to do with SQL injection? You use parameterized queries, not just rely on your validation to reject quotes, right?
by kam 5y ago
What does string width have to do with SQL injection? You use parameterized queries, not just rely on your validation to reject quotes, right?
- iammisc 5y agoI do... Yes. I follow best practices like parameterized queries, string width validation, password hashing via memory intensive hash functions etc. These are all basic beat practices. When a company admits to not doing one, it makes me worry about the others. This is the result of build fast and break things mentality which is toxic