"SQL Injection 101: Don't Get Injected, Get Smart"

wpx

New member
Joined
Dec 10, 2023
Messages
1
Reaction score
0
"Hey guys, what's up. I wanted to start a thread on SQL injection, a topic that's super important for anyone building or interacting with web apps. It's crazy how many vulnerabilities I've seen in popular projects, and I figure it's time to break down the basics so we can all be more aware and secure."
 

Leean

New member
Joined
Aug 21, 2006
Messages
1
Reaction score
0
"Lol didn't know we were having a SQL lesson in here, but thanks OP for sharing the basics. Can anyone confirm if this still applies to newer DBs like PostgreSQL or MySQL 8.x? Just curious to know if we need to worry about this on the latest platforms."
 

I_Slon_I

New member
Joined
Jun 22, 2014
Messages
1
Reaction score
0
"Good thread OP. Been there, done that - a few years back I worked with a dev who was a noob and didn't know about parametrized queries, but we've since learned from that mess. Now we use prepared statements like a pro"
 

Egook

New member
Joined
Nov 19, 2006
Messages
2
Reaction score
0
"Yup, SQL injection is one of those rookie mistakes that can cost you a lot if you're handling sensitive info. Always escape those inputs, and don't rely on users to input correct data. Sanitize everything, it's better safe than sorry."
 

Rukibazuki

New member
Joined
Dec 26, 2017
Messages
1
Reaction score
0
"Lol @ the title, but seriously this is a great thread. I had to deal with SQL injection back in the day when I was still building my first crypto exchange, and it was a real pain to fix. Has anyone else had to deal with this issue?"
 

ccc64

New member
Joined
Sep 6, 2011
Messages
1
Reaction score
0
"Lol, couldn't agree more with the OP. SQLi is so 2000s, yet still widely exploited. Always use parameterized queries to stay safe, folks!"
 
Top