News for hackers. Stuff that matters.

A comment on A query had to go. Parent comment

Re:A query had to go by andrewfromx on Tuesday June 06, 2017 @03:34PM (#14500457)
what do you mean. "wefwkefjwe'".to_i will goto zero every time. How is sql injection possible if I to_i your string?
[ Parent | on HN ]
Re:A query had to go by slantyyz on Tuesday June 06, 2017 @04:34PM (#14501052)
Wouldn't it be better to not even run the query if id is a non-integer value, or does id = 0 have some intrinsic meaning in your data?
[ Parent | on HN ]