Python Forum
SQL Injection attacks on Python code
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
SQL Injection attacks on Python code
#3
(Oct-11-2022, 03:57 PM)deanhystad Wrote: Imagine a product database where the product description could not use all, any, as, from, in, ...

Thanks for the reply.

Is it not the case that strings being returned from a database (as would be the case for a product description) are not the issue. If it's a search term that's being sent to the database, then where's the harm? It's easy to exclude * or ' or '''' in fact anything that's not a-z, A-Z or 0-9.
Sig:
>>> import this

The UNIX philosophy: "Do one thing, and do it well."

"The danger of computers becoming like humans is not as great as the danger of humans becoming like computers." :~ Konrad Zuse

"Everything should be made as simple as possible, but not simpler." :~ Albert Einstein
Reply


Messages In This Thread
SQL Injection attacks on Python code - by rob101 - Oct-11-2022, 03:20 PM
RE: SQL Injection attacks on Python code - by rob101 - Oct-11-2022, 04:12 PM

Possibly Related Threads…
Thread Author Replies Views Last Post
  Better Understanding of Security and injection attacks SQLite KevinBrown 1 2,228 Apr-09-2019, 09:45 PM
Last Post: Legomancer
  Sql Injection using python sumandas89 2 3,497 Jan-15-2018, 03:04 PM
Last Post: metulburr

Forum Jump:

User Panel Messages

Announcements
Announcement #1 8/1/2020
Announcement #2 8/2/2020
Announcement #3 8/6/2020