6 ms·

> SQL-injection > NASDAQ

• tracker1 13y ago
  That was my first note as well.. imho, they deserved to get hacked.
• sirsar 13y ago
  Sanitizing your inputs is apparently even harder than salting and hashing your passwords, something even the big-name companies tend to mess up. Sigh.
  • PlaneSploit 13y ago
    Little Bobby Tables, we call him.
    • dpatru 13y ago
      http://xkcd.com/327/ http://xkcd.com/327/
  • deleted 13y ago
    [deleted]
  • k_bx 13y ago
    You don't even need to sanitize them, actually.
    • sirsar 13y ago
      That's true. For example in Python, you declare the query as "Select * from a where b=? and c=d" and then put a tuple (z,) to specify b. It's something the NYSE should get "hip" to.