5 ms·
Sanitizing your inputs is apparently even harder than salting and hashing your passwords, something even the big-name companies tend to mess up. Sigh.
by sirsar 13y ago
Sanitizing your inputs is apparently even harder than salting and hashing your passwords, something even the big-name companies tend to mess up.
Sigh.
- PlaneSploit 13y agoLittle Bobby Tables, we call him.
- dpatru 13y agohttp://xkcd.com/327/ http://xkcd.com/327/
- deleted 13y ago[deleted]
- k_bx 13y agoYou don't even need to sanitize them, actually.
- sirsar 13y agoThat's true. For example in Python, you declare the query as "Select * from a where b=? and c=d" and then put a tuple (z,) to specify b. It's something the NYSE should get "hip" to.