A query had to go

Re:A query had to go by packetized on Tuesday June 06, 2017 @03:23PM (#14500350)

That sounds like a recipe for disaster, if that's the only thing you're relying on for input validation of #{id}.

[ Parent | on HN ]

Re:A query had to go by andrewfromx on Tuesday June 06, 2017 @03:34PM (#14500457)

what do you mean. "wefwkefjwe'".to_i will goto zero every time. How is sql injection possible if I to_i your string?

[ Parent | on HN ]

Re:A query had to go by slantyyz on Tuesday June 06, 2017 @04:34PM (#14501052)

Wouldn't it be better to not even run the query if id is a non-integer value, or does id = 0 have some intrinsic meaning in your data?

[ Parent | on HN ]