Now you have to be aware of SQL escaping to prevent SQL injection attacks. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

rmc on March 11, 2015 | parent | context | favorite | on: Goodbye MongoDB, Hello PostgreSQL

Now you have to be aware of SQL escaping to prevent SQL injection attacks.

onion2k on March 11, 2015 [–]

Everyone who works with SQL should be aware of SQL escaping. There's nothing wrong using a library to do it for you, but what you should have an understanding of what the library is actually doing. Otherwise how could you possibly test it? Just by hoping it's right?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact