News for hackers. Stuff that matters.
Re:Password may not contain: select, insert, update, delete,... by mysterydip on Sunday January 21, 2024 @09:11AM (#39078553)
Yeah, that's what's mapped in my head to "sanitizing input" in these cases, as it's the correct way to handle them. I should've unrolled my brain shortcut for the discussion.
Re:Password may not contain: select, insert, update, delete,... by dylan604 on Sunday January 21, 2024 @09:30AM (#39078732)
Before Parameterized SQL was a thing, sanitizing was the thing. There’s a lot of escape_string() type of methods out there.