On Tue, Nov 5, 2013 at 2:40 PM, Walter Prins <wpr...@gmail.com> wrote: > Hi, > > > On 5 November 2013 19:02, Danny Yoo <d...@hashcollision.org> wrote: >>> >>> Be extra careful if you're constructing SQL statements from user input. >>> You have probably heard of the term "SQL Injection" or "Bobby Tables", both >>> of which are pretty much the same thing: your user may, intentionally or >>> not, input values that can be interpreted as SQL commands rather than as >>> literal data. > > > For those not familiar: > http://xkcd.com/327/ > > :) > > Walter > > > _______________________________________________ > Tutor maillist - Tutor@python.org > To unsubscribe or change subscription options: > https://mail.python.org/mailman/listinfo/tutor >
thanks for that link. I'd seen it before. So succinct. -- Joel Goldstick http://joelgoldstick.com _______________________________________________ Tutor maillist - Tutor@python.org To unsubscribe or change subscription options: https://mail.python.org/mailman/listinfo/tutor