4 ms·
For people wondering how to do this properly it's called parametrized queries.
by julienreszka 3y ago
For people wondering how to do this properly it's called parametrized queries.
- readthenotes1 3y agoYou mean storing plain text passwords in a database is safe?
- sevensevennine 3y agoAbsolutely right-- the warning is only necessary if they're not hashing the password before templating the string prior to storage.
- dylan604 3y agoNaturally. You just use a different name for that field than password, and the hackers will never know! /s
- da768 3y agoyou could still hope it's a WAF issue or they're hashing passwords through the database query, though both unlikely