4 ms·
If I use sql parameters in my queries, am I still vulnerable to SQL injection? What about using a (sane) ORM? Basically, is it only php apps that hand-build qu
by herge 14y ago
If I use sql parameters in my queries, am I still vulnerable to SQL injection? What about using a (sane) ORM?
Basically, is it only php apps that hand-build queries that are vulnerable to SQL injection?
- jasonlotito 14y agoAny app that hand-builds queries. PHP has nothing to do with this. Just happens to be the vehicle. The problem is simply insecure patterns.