2 ms·
The better way to defend against SQLi would be to use proper quoting/prepared statements, instead of trying to play whack-a-mole by filtering and limiting the c
by 0x0 13y ago
The better way to defend against SQLi would be to use proper quoting/prepared statements, instead of trying to play whack-a-mole by filtering and limiting the content of the input strings.
- skolor 13y agoCorrect, but that doesn't make the statement of the causes for SQLi any different.