Timeline for Does calling query() on a container prevent SQL Injection?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 27, 2017 at 3:43 | history | edited | avpaderno♦ | CC BY-SA 3.0 |
fixed a typo in the code
|
| Jul 26, 2017 at 18:05 | comment | added | avpaderno♦ | Indeed there are other considerations to do, apart SQL injection. For example, the code should check the users are not getting information they should not get, such as the email used from other users. That is a matter of checking the permissions the logged-in user has, which is different from preventing SQL injection. | |
| Jul 26, 2017 at 17:53 | comment | added | Kevin | Yeah, probably would avoid using $_GET in general without some additional checks or protection from input, even though this is just an example. | |
| Jul 26, 2017 at 17:48 | history | answered | avpaderno♦ | CC BY-SA 3.0 |