Reply to thread

Message: <blockquote data-quote="Janx" data-source="post: 6023679" data-attributes="member: 8835">Just pass it along to him.  I'm always surprised by devs who forget to do this.  It's part of standard practice to safetypad and validate datatype on all values I'm building into SQL.  Any Pro developer should know this by now.One could argue that this is just a table-making app and not critical for that level of caution.  But kids in China, Russia, etc seem to have free time to launch attachs with scripts that test for this vulnerability.  It's all fun until they take your site down.  All for the lack of an extra function call that is consistently applied through out the code.You can chalk it up to your dev made a mistake.  His best response is to comb through his code and fix it everywhere and to modify his style to account for it EVERY time consistently, so it won't happen to him again.</blockquote>