4 ms·
I agree that this particular issue is extremely obvious and quite poor, but in the particular given link we're responding to their response was more than reason
by technion 5y ago
I agree that this particular issue is extremely obvious and quite poor, but in the particular given link we're responding to their response was more than reasonable.
- couchand 5y agoHmm... commentor raises concern that string manipulation dressed up as prepared statements is potentially a source of SQL injection vulnerabilities. Maintainer dismisses concern as "FUD". Eight years later, article is posted showing an exploitable SQL injection vulnerability. I'm thinking they should have listened rather than getting defensive.
- merb 5y agoWell the first sentence is the problem, not the second.