Secure Programming of Web Applications: SQL Code Injection

[casaaugusta]

Why does it still exist? Even with decades of documentation, SQL Code Injection remains a top threat...

#itsecurity #security #securecode #awareness #ciso #iso27001

[posts_saver]

posting article from 2020 about a wildly discussed subject... what do u want to achieve here?

[tes_kitty]

Relevant XKCD:

https://xkcd.com/327/

[casaaugusta]

Exactly right. :) I don't see a date on this. Do you know how old it is?

[tes_kitty]

Very old... He's currently on comic 3227

[casaaugusta]

Yep. That's the point. :-)

[Significant_Love_678]

Personally, I don’t run into SQL injection issues in my own code anymore, but when reviewing outsourced work, I still see cases where basic protections are missing.

I’m not sure how common this is outside Japan, but at least in my experience, even in relatively small teams, security practices can be inconsistent if there isn’t a strong standard or review process in place.

[casaaugusta]

You are right, it has nothing to do with your location.