News for hackers. Stuff that matters.

A comment on Explain SQL injection without technical jargon. Parent comment

Re:Explain SQL injection without technical jargon by saurik on Tuesday December 25, 2012 @03:13AM (#4965464)
Yet, this has happened before. "NoSQL Doesn’t Mean No SQL Injection"[1] You also need to worry about escaping $ operators in your query documents[2].

[1]: http://www.kalzumeus.com/2010/09/22/security-lessons-learned...

[2]: http://docs.mongodb.org/manual/faq/developers/#dollar-sign-o...

[ Parent | on HN ]

There are no comments on this comment yet.