themaninblack@lemmy.world to memes@lemmy.world · 6 days agoCVS stylelemmy.worldimagemessage-square119linkfedilinkarrow-up1954arrow-down119
arrow-up1935arrow-down1imageCVS stylelemmy.worldthemaninblack@lemmy.world to memes@lemmy.world · 6 days agomessage-square119linkfedilink
minus-squareryannathans@aussie.zonelinkfedilinkarrow-up9·5 days agoParameterisation entirely solves the problem without needing to sanitise the string
minus-squareMotoAsh@piefed.sociallinkfedilinkEnglisharrow-up4arrow-down1·5 days agoNot entirely (I recall seeing some obscure CVEs some years ago), but it’s a hell of a lot better than what some coders try to get away with.
minus-squarePhobosAnomaly@feddit.uklinkfedilinkarrow-up2·5 days agoI don’t disagree, but throwing out the concept of prepared statements and parameterisation to someone who has asked for an explanation of the Bobby Tables jokes is a bit heavy going.
Parameterisation entirely solves the problem without needing to sanitise the string
Not entirely (I recall seeing some obscure CVEs some years ago), but it’s a hell of a lot better than what some coders try to get away with.
I don’t disagree, but throwing out the concept of prepared statements and parameterisation to someone who has asked for an explanation of the Bobby Tables jokes is a bit heavy going.