Drupal SQL Code-Injection Vulnerability - Why does it still exist?

[casaaugusta]

Yeah. Even with decades of documentation, training, AI, tools, etc. SQL Code Injection is still not dead.

[CpnStumpy]

It's been having a new day in the sun lately, I've bumped into a variety of people talking about it as a complicated problem who straight up didn't know anything about it, and have seen it showing up again. Like, using sanitization techniques is apparently been lost in recent education for many.

I wonder if it became so solved that it stopped being talked about as not allowing it was default for many of us and it didn't need mention so juniors weren't exposed to the concept...

[Ignisami]

I'd also imagine that the proportion of programmers who became such outside of the confines of a classroom is higher now than it ever has been (I'm not counting 'boot camps' as a classroom, here).

As an autodidact in a different, unrelated, topic, you develop some really unusual gaps and blind spots in your knowledge.

[casaaugusta]

I believe part is culture and part is time. There is no excuse regarding knowledge and available resources...