• nottheengineer@feddit.de
      link
      fedilink
      arrow-up
      3
      ·
      1 year ago

      I’d call the second group fools because those are generally the ones that the system is trying to be safe against.

    • marcos@lemmy.world
      link
      fedilink
      arrow-up
      0
      arrow-down
      1
      ·
      1 year ago

      If you are creating some software in 2023, it should not be vulnerable to SQL injection.

      There’s no “but” or “unless”.

      I really wished the presentation layer and session management had that kind of clear interfaces, instead we are stuck into only solving some 99.9% of CSS and 90% of CSRF. But SQL injection is 100% complete solved for good.