Re:Finding an authorization bypass on my own website
by DaiPlusPlus on Sunday March 06, 2022 @12:52AM
(#30575352)
SQL Server has had _autoparameterization_ opf queries for a while now: when you have multiple queries of the same general shape but with varying literal values, it automatically converts the literals to parameters (rather than vice-versa), and it's generally beneficial for performance because existing query-plans can be reused (instead of having to create a new plan for each literal value encountered): https://www.mssqltips.com/sqlservertip/2935/sql-server-simpl...
[ Parent
| on HN ]