Re:14 Years of SQL Injection and still the most dangerous vu...
by dragonwriter on Thursday August 22, 2013 @10:57AM
(#6257514)
> When combining software components, you have to gateway between them -- this is done by escaping inputs and validating outputs.
Well, no, its done by constructing outputs from inputs in one module, and validating inputs in the next module (you can validate outputs, as well, but that's less critical.) "Escaping" is one method of constructing outputs from inputs, but its often an unsafe and undesirable method.
Well, no, its done by constructing outputs from inputs in one module, and validating inputs in the next module (you can validate outputs, as well, but that's less critical.) "Escaping" is one method of constructing outputs from inputs, but its often an unsafe and undesirable method.