News for hackers. Stuff that matters.

A comment on 14 Years of SQL Injection and still the most dangerous vulnerability. Parent comment

Re:14 Years of SQL Injection and still the most dangerous vu... by worseisworse on Thursday August 22, 2013 @11:54AM (#6257904)
>Any sane programming community would string me up by my thumbs for doing this, and rightly so.

How do you explain shell scripting then? Bash and co. have been 'industry best practice' for decades. They feature all these problems of in-band communication and (attempts at) escaping and nobody seems to consider it a problem.

[ Parent | on HN ]
Re:14 Years of SQL Injection and still the most dangerous vu... by mikeash on Thursday August 22, 2013 @11:59AM (#6257942)
Shell scripting is another insane domain where stuff that would be crazy everywhere else is suddenly accepted. Fortunately, they at least recognize that it's usually a bad idea to feed potentially hostile data to local scripts.
[ Parent | on HN ]