News for hackers. Stuff that matters.

A comment on Tales of SugarCRM Security Horrors. Parent comment

Re:Tales of SugarCRM Security Horrors by bpicolo on Monday April 24, 2017 @09:53AM (#14184296)
> mitigates any potential SQL injection problems

Not quite, string concat for defining queries is still plenty vulnerable regardless of PDO.

[ Parent | on HN ]
Re:Tales of SugarCRM Security Horrors by dmilicevic on Monday April 24, 2017 @10:17AM (#14184478)
it mitigates quite some SQL injection possibilities, but yes, string concat while building queries still remains an issue.
[ Parent | on HN ]