Learn More
Resend Email
134
opengenus
4y

Interviewer: Do you know about SQL injection?

Student: Yessss

Interviewer: Okay, how we can prevent it?

Student: Yes, we should prevent it as prevention is always better than cure. It can lead to data loss and other problems so it can be difficult to fix it if it happens. The best case is that nothing like that takes place. [...]

Interviewer: I get it but how?

Student: By not building any web applications.

[Silence]

Interviewer: Nice, you may go. Do not call us. We will call you.

rant
Favorite
Ranter
Comments
  • 37
    4y
    Do they get extra points for not just saying "I don't know"?
  • 6
    4y
    Genius
  • 42
    4y
    @kamen Minus. Not admitting the lack of knowledge can bring down entire projects.
  • 20
    4y
    I thought the joke was "By not using SQL"
  • 14
    4y
    Well I'm totally not into database knowledge, but my try would have been "by never trusting any external input, always sanitising/escaping it server-side (no matter whether it had been validated client-side)"?
  • 11
    4y
    @Fast-Nop

    and by using prepared statements
  • 9
    4y
    so did u get the job or not dont leave us hanging
  • 8
    4y
    Prepared statements, sanitize your inputs, thoughts and prayers.
  • 6
    4y
    Is that student an AI?
  • 4
    4y
    @SukMikeHok 2 weeks in, still waiting.
  • 2
    4y
    @ultimaterage so you mean No-SQL ?
  • 3
    4y
    @Fast-Nop Data that writes to the database should ALWAYS be sanitized client side and server side. I think were in agreement but just wanted to stress that it should never be just one even if it's getting done server side.
  • 3
    4y
    boo
  • 3
    4y
    @smirving For the injection issue specifically, I think client-side sanitation can never be trusted because attackers can modify any client-side code anyway and use their modified forms etc for submitting.

    For catching user errors without needing several roundtrips in GUI delay, client-side validation is still helpful.
  • 5
    4y
    I know it! You need to base64 every user input. That way it'll never be meaningful SQL.
  • 3
    4y
    @Lor-inc Yeah, you're right. Fair enough.
  • 16
    4y
    "Do you know MySQL?"

    "Your SQL?"
  • 3
    4y
    Hardcode all dat shitteeeee
devRant © 2021 Hexical Labs LLC
Privacy Policy  |  Terms of Service
Add Comment