3 ms·
A lot of safety/security isn't hard, people just don't do it if it isn't forced on them/ easy.
by staticassertion 4y ago
A lot of safety/security isn't hard, people just don't do it if it isn't forced on them/ easy.
- cryptonector 4y agoThis. If SQL injection was infeasible because the language had no literals, then there would be no SQL injection. Given that SQL injection is possible because the language does have literals, we should and do in fact still have SQL injection issues.
- klysm 4y agoThe fact that SQL has literals is not a problem. It’s true that eliminating literals would prevent SQL injection but it’s an absurd solution to the problem. How should we write queries by hand? What about things that actually should be constant (e.g where col is null)?