News for hackers. Stuff that matters.

sqliwtf

Re:Finding an authorization bypass on my own website on Saturday March 05, 2022 @07:58PM (#30573826)
That’s the kind of thing you say to ship a product to market, to eschew a non-critical feature.

Parametrized Queries for a SQL library are a critical “do not ship without” feature. You do not lie and tell your user you have a safe product causing them to have a compromised system.

I hope to God you are not creating production systems anywhere.