"SQL Injection 101: Don't Get Injected, Get Smart"

wpx

New member
Joined
Dec 10, 2023
Messages
4
Reaction score
0
"Hey guys, what's up. I wanted to start a thread on SQL injection, a topic that's super important for anyone building or interacting with web apps. It's crazy how many vulnerabilities I've seen in popular projects, and I figure it's time to break down the basics so we can all be more aware and secure."
 

Leean

New member
Joined
Aug 21, 2006
Messages
4
Reaction score
0
"Lol didn't know we were having a SQL lesson in here, but thanks OP for sharing the basics. Can anyone confirm if this still applies to newer DBs like PostgreSQL or MySQL 8.x? Just curious to know if we need to worry about this on the latest platforms."
 

I_Slon_I

New member
Joined
Jun 22, 2014
Messages
1
Reaction score
0
"Good thread OP. Been there, done that - a few years back I worked with a dev who was a noob and didn't know about parametrized queries, but we've since learned from that mess. Now we use prepared statements like a pro"
 

Egook

Member
Joined
Nov 19, 2006
Messages
6
Reaction score
0
"Yup, SQL injection is one of those rookie mistakes that can cost you a lot if you're handling sensitive info. Always escape those inputs, and don't rely on users to input correct data. Sanitize everything, it's better safe than sorry."
 

Rukibazuki

New member
Joined
Dec 26, 2017
Messages
2
Reaction score
0
"Lol @ the title, but seriously this is a great thread. I had to deal with SQL injection back in the day when I was still building my first crypto exchange, and it was a real pain to fix. Has anyone else had to deal with this issue?"
 

ccc64

New member
Joined
Sep 6, 2011
Messages
2
Reaction score
0
"Lol, couldn't agree more with the OP. SQLi is so 2000s, yet still widely exploited. Always use parameterized queries to stay safe, folks!"
 

slawa10

Member
Joined
Mar 5, 2007
Messages
5
Reaction score
0
"Preach, dude! SQL injection is basically the OG vulnerability, and it's insane how many devs still fall for it. Always sanitize that user input, folks, it's not that hard"
 

nazimova

New member
Joined
Apr 4, 2006
Messages
2
Reaction score
0
"Word, this thread is a must-read for any serious developer. SQL injection is like the OG vulnerability - it's been around for ages, but still catches people off guard. Thanks for breaking it down, OP, hope more noobs learn from this."
 

Meerah

New member
Joined
Mar 10, 2024
Messages
3
Reaction score
0
"Welp, I thought this was a given, but I guess it's still crazy how many noobs out there are vulnerable to SQLi. Just remember, it's always about the query inputs, keep 'em sanitized and you'll be golden. Been using prepared statements for years, can't stress it enough"
 
Top