11 ms·
Other rdbms have identifier quoting, yes. But the problem isn't that identifier quoting exists, it's that the library interprets an object as a key = value stat
by andreareina 5y ago
Other rdbms have identifier quoting, yes. But the problem isn't that identifier quoting exists, it's that the library interprets an object as a key = value statement (compounded
treating the key as an identifier), which it shouldn't.
... AND password = password = 1
is just wrong, quoted or not.
- yawaramin 5y agoAlso, the fact that the library doesn't validate the type of the input data ({password: 1} when the password should be a string...). This is just a cascading chain of failures.