Re:No-SQL injection in Mongo PHP
by tptacek on Monday March 07, 2011 @04:03PM
(#2298662)
"Always validate your inputs" is unfortunately one of the least useful bits of security advice given to developers; it is only epsilon away from "never make mistakes".
[ Parent
| on HN ]
Re:No-SQL injection in Mongo PHP
by sausagefeet on Monday March 07, 2011 @07:09PM
(#2299272)
I agree with you, but also pointing out a strength of a language that supports phantom types helps this issue quite a bit. You can design your DB API to not allow unquoted queries.