Coffee on the Keyboard
  • Home
  • jamessocol.com
Sign in Subscribe

injection

A collection of 2 posts
django

Injections, SQL and otherwise - Basic Security Part 4

NB: This is the fourth post in a series [https://www.coffeeonthekeyboard.com/best-basic-security-practices-especially-with-django-697/] of posts on web application security. SQL Injection SQL injection is a vector that lets a user insert their own SQL into a statement sent to your database server. The typical example is: 1. "SELECT
20 Jul 2012 1 min read
attack

Responsible SQL: How to Authenticate Users

Most SQL-injection articles set a horrible example for young programmers. Here is a very typical “bad example” of why you need to escape user data before it goes into SQL queries: (ed. The symbol « is a line break that’s not in the real code.) 1. $username = $_POST[‘username’]; // username=
09 Nov 2008 4 min read
Page 1 of 1
Coffee on the Keyboard © 2025
Powered by Ghost