14 Years of SQL Injection and still the most dangerous vulnerability

Re:14 Years of SQL Injection and still the most dangerous vu... by mikeash on Thursday August 22, 2013 @12:53PM (#6258302)

I completely agree. However, the PHP community is still a huge part of the server-side web community, so they're largely representative even if nobody else follows their lead.

[ Parent | on HN ]

Re:14 Years of SQL Injection and still the most dangerous vu... by astrodust on Thursday August 22, 2013 @01:23PM (#6258505)

Representative of what? No other community follows PHP. If anything, PHP is trying to imitate other languages with varying degrees of success.

[ Parent | on HN ]

Re:14 Years of SQL Injection and still the most dangerous vu... by mikeash on Thursday August 22, 2013 @02:22PM (#6258965)

Representative of themselves, really. The point being that even if PHP is different from everything else, PHP is big enough that their wacky antics are still significant, and PHP alone is enough to say that escaping parameters in SQL is still widespread.

[ Parent | on HN ]