Timeline for Is reliance on parametrized queries the only way to protect against SQL injection?
Current License: CC BY-SA 3.0
13 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 12, 2017 at 7:31 | history | edited | CommunityBot | replaced http://programmers.stackexchange.com/ with https://softwareengineering.stackexchange.com/ | |
| Feb 16, 2015 at 20:30 | history | protected | gnat | ||
| Jul 24, 2011 at 14:46 | history | edited | Chris Walton | CC BY-SA 3.0 | Expanded question. |
| Jul 21, 2011 at 20:58 | comment | added | Konrad Rudolph | @Matthew Duh. I was actually thinking of “parametrised queries” when reading that and commenting about it. Stored procedure = whole ’nother story. | |
| Jul 21, 2011 at 16:54 | comment | added | Matthew Flynn | @Konrad Rudolph - If you write your application on MySQL and then decide to migrate to DB2, do you really think the stored procedures are going to be compatible? Likewise if you want to migrate to SQLLite? Also, suppose you upgrade your OS--if your stored procedures are compiled in C (which they are in DB2), they'll probably all need recompiling. These are reasonable arguments--not absolute, but reasonable. | |
| Jul 21, 2011 at 15:05 | comment | added | Mark Canlas | What's up with the no-nulls requirement? | |
| Jul 21, 2011 at 14:10 | comment | added | Konrad Rudolph | I don’t buy the arguments against stored procedures. They are simply not true. | |
| Jul 21, 2011 at 12:00 | answer | added | Jon Hopkins | timeline score: 6 | |
| Jul 21, 2011 at 11:44 | history | edited | Chris Walton | CC BY-SA 3.0 | Emphasis of the question changed, in the light of the initial responses received. Base question unchanged. |
| Jul 21, 2011 at 11:21 | history | edited | Chris Walton | CC BY-SA 3.0 | Additional information. |
| Jul 21, 2011 at 10:57 | answer | added | l0b0 | timeline score: 11 | |
| Jul 21, 2011 at 10:27 | answer | added | Craig | timeline score: 25 | |
| Jul 21, 2011 at 10:21 | history | asked | Chris Walton | CC BY-SA 3.0 |