PHP 7 Released - Hackdot

Re:PHP 7 Released by mikeash on Wednesday December 02, 2015 @01:45PM (#10664905)

I'm not sure what your point is here, because what I'm advocating is precisely to make it easier to use parameterized queries and more difficult not to.

[ Parent | on HN ]

Re:PHP 7 Released by sarciszewski on Wednesday December 02, 2015 @02:03PM (#10665043)

I wasn't being argumentative, I just thought that would be something worthwhile to add for people following along.

[ Parent | on HN ]

Re:PHP 7 Released by mikeash on Wednesday December 02, 2015 @02:10PM (#10665089)

Gotcha, sorry. "Pop quiz" always makes me think it's being sarcastic.

So, yes, total agreement there. Parameterized queries are key. I find it crazy that anything else ever existed, let alone still gets used.

[ Parent | on HN ]

Re:PHP 7 Released by sarciszewski on Wednesday December 02, 2015 @03:22PM (#10665536)

Ah, yeah, I hadn't considered the normal usage.

Most people don't realize how much these vulnerabilities have in common, in the abstract, until you frame it like that.

[ Parent | on HN ]