Re:No-SQL injection in Mongo PHP
by rickmb on Monday March 07, 2011 @04:53PM
(#2298864)
> a) You're going to forget it at least once.
Which is why you should never process raw input in multiple places in your app. One method I've used for over a decade of webdev in any language: there's only one place to get the input from, and that place requires you specify what input is allowed.
Which is why you should never process raw input in multiple places in your app. One method I've used for over a decade of webdev in any language: there's only one place to get the input from, and that place requires you specify what input is allowed.