A Novel Technique for SQL Injection in PDO's Prepared Statements (slcyber.io)

1 points by donatj 11mo ago ↗ HN

1 comment

[ 3.3 ms ] story [ 17.9 ms ] thread

1oooqooq 11mo ago ↗

only if you're inserting user strings into the statement. meh.