3 ms·
Communicating with a SQL driver by concatenating strings containing user input and then evaluating it? wat? I'm very interested in what tech stack you are usin
by auxiliarymoose 1y ago
Communicating with a SQL driver by concatenating strings containing user input and then evaluating it? wat?
I'm very interested in what tech stack you are using where this is a problem.
- jfengel 1y agoPeople do it all the time, on any tech stack that lets you execute command strings. A lot of of early databases didn't even support things like parameterized inserts.