4 ms·
I would argue if you sanitize your input you are already doing it wrong, you should parameterize queries and send the data entirely separately from code.
by lyu07282 2y ago
I would argue if you sanitize your input you are already doing it wrong, you should parameterize queries and send the data entirely separately from code.
- swasheck 2y agofrom a certain perspective, parameterization could be seen as sanitation, no?
- bewaretheirs 2y agoIf it sanitizes anything, parameterization sanitizes the code, not the data, and has much lower impact on the outside world (because the rest of the world isn't pressured to rename things in the real world to fit arbitrary constraints in the computer).