News for hackers. Stuff that matters.
Re:Finding an authorization bypass on my own website by magicalhippo on Saturday March 05, 2022 @11:00PM (#30574917)
> Except there is no such thing as "actual parametrized queries", either as defined by the SQL standard or as supported by any of the major RDBMS vendors.

We're in the process of adding support for MSSQL in addition to the DB server we've been using for ages. This is one of the pain points. They differ in how they handle "parameterized queries" enough to be a PITA.

There are no comments on this comment yet.