What kind of a backwards language do you have to use that doesn't have the simple feature of protecting you from it out of the box? Are you building you queries by concatenating strings like a CS freshman?
Name:
Anonymous2018-10-19 8:38
Real computer scientists use datalog instead of SQL.
Datalog Injection is actually not a real vuln because three people use the language professionally and they would just hack each other's autistic applications.
this isn't a language feature. it's a library feature.
Name:
Anonymous2018-10-19 20:53
>>4 Sql integration is such a basic and common feature that it’s basically a language feature.
Name:
Anonymous2018-10-19 20:56
Haxmy anus bobby tables (xkcd reference, a webcomic got geeks)
Name:
Anonymous2018-10-19 21:18
Prepared statements are very useful against SQL injections, because parameter values, which are transmitted later using a different protocol, need not be correctly escaped. If the original statement template is not derived from external input, SQL injection cannot occur.
>>23 You can implement a pts type checker in pretty much any Turing complete language. This does not mean that the language itself supports dependent types.