4 ms·
Gotta love the MVC pattern ... with an SQL injection vulnerability - http://dpip.testingperspective.com/?p=18 http://dpip.testingperspective.com/?p=18 (What hap
by anthonyb 15y ago
Gotta love the MVC pattern ... with an SQL injection vulnerability - http://dpip.testingperspective.com/?p=18 http://dpip.testingperspective.com/?p=18 (What happens when you search for a component ID of "'; drop table defects")
Also, what is the controller doing? Why is there even a DefectModel with database code in it? Why is it not using an ORM style like every other database-fetching thing written this century?
I've looked at a couple of "chapters" of their "book" now, and it's all hideous train wreck code like this, with stuff that reads like it's been cut+pasted out of a wiki somewhere, and no sample output/data. I'm not sure what you're supposed to learn from these examples, other than "Design Patterns are hard".