this post was submitted on 21 Jun 2023
728 points (96.9% liked)
Programmer Humor
32000 readers
688 users here now
Post funny things about programming here! (Or just rant about your favourite programming language.)
Rules:
- Posts must be relevant to programming, programmers, or computer science.
- No NSFW content.
- Jokes must be in good taste. No hate speech, bigotry, etc.
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
They should use parameterized queries, not sanitization.
Technically, a parameterized query is just doing sanitization for you. Or does escaping not count as sanitizing?
Although nothing wrong with sanitizing yourself then using parameterized queries. Never know if the API has a bug.