News for hackers. Stuff that matters.

A comment on Exploiting 'INSERT INTO' SQL Injections Ninja Style.

Re:Exploiting 'INSERT INTO' SQL Injections Ninja Style by brendoncrawford on Friday October 28, 2011 @10:36PM (#3170902)
In 2011, one should never need to resort to building SQL with string concatenation in web applications.

If you are on Python, consider using SQLAlchemy or OurSQL. If you are on PHP, consider using Doctrine, Propel, or PDO.

[ Parent | on HN ]

There are no comments on this comment yet.