Timeline for Is it possible to detect 100% of SQLi with a simple regex?
Current License: CC BY-SA 4.0
10 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 22, 2019 at 16:25 | comment | added | Philipp | Whether you like or dislike ORMs is a software engineering question, not a security question. | |
| Feb 22, 2019 at 16:12 | comment | added | Hannah Vernon | Actually, @paj28, I disagree that ORMs make for clean and concise code. What they actually do is obscure arguably the most important code in the entire project. That is, if you believe the data is the raison d'être for the project in the first place. | |
| Feb 22, 2019 at 16:04 | comment | added | Hannah Vernon | @paj28 - that may be, however when you use an ORM to write SQL for you, you're making it almost impossible to troubleshoot performance later on, when it does matter. ORMs are a shortcut that have a tendency to shoot you in the foot when you least expect it. If you're at all concerned about writing great code, you write the SQL yourself. | |
| Feb 22, 2019 at 8:17 | comment | added | paj28 | @MaxVernon - ORMs make for clear and concise code, which 90+% of the time is more important than squeezing extra performance out of the DB. | |
| Feb 21, 2019 at 15:00 | comment | added | Hannah Vernon | ORM wrappers are notoriously bad at creating well-formed, efficient SQL. I'd put that at the end of your recommendations, if I'd even add it to the list. | |
| Feb 21, 2019 at 12:20 | comment | added | dotancohen | Parameterized queries are not "also known as" prepared statements. Parameterized queries are one form of a prepared statement, but not the only form. The two should not be conflated. | |
| Feb 20, 2019 at 15:39 | history | edited | Philipp | CC BY-SA 4.0 |
added 27 characters in body
|
| Feb 20, 2019 at 15:32 | history | edited | Philipp | CC BY-SA 4.0 |
added 1 character in body
|
| Feb 20, 2019 at 15:27 | history | edited | Philipp | CC BY-SA 4.0 |
added 26 characters in body
|
| Feb 20, 2019 at 15:21 | history | answered | Philipp | CC BY-SA 4.0 |