News for hackers. Stuff that matters.

A comment on No-SQL injection in Mongo PHP. Parent comment

Re:No-SQL injection in Mongo PHP by albertzeyer on Monday March 07, 2011 @07:06PM (#2299265)
The old Redis protocol was also not binary safe. If you are able to access the value in some `redisCommand("SET %s %s", key, value)`, you are able to inject other commands there.

But the new Redis protocol is safe against that.

[ Parent | on HN ]

There are no comments on this comment yet.