3 ms·
I'm not talking about parameterization. I'm talking about SQL injection. Just look at all the CVEs related to SQL injection. It isn't a solved problem.
by gitfan86 4y ago
I'm not talking about parameterization. I'm talking about SQL injection. Just look at all the CVEs related to SQL injection. It isn't a solved problem.
- ceejayoz 4y agoParametization is the solution to SQL injection. It's a solved problem, people are just still writing non-parameterized queries.