Вопрос

I am now using my 100th (ok, exaggerated) language&framework combination with MySQL. It seems almost silly, and also very risky, to me that every single one of these tools provides their own escaping functionality. Does MySQL (or other SQL solutions) not offer that themselves? What if there is a little bug in one such customized escape functions? Why should we have to trust third party providers to get it right?

Это было полезно?

Решение

MySQL has connectors and APIs including functions like mysql_real_escape_string and programming languages are just adapting them.

Лицензировано под: CC-BY-SA с атрибуция
Не связан с StackOverflow
scroll top