Details
Joined devRant on 1/12/2018
Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API

From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
Me Vs a PHP teacher
Him:
And to do login, we just do SELECT username WHERE password = (userinput)
Me:
Really? Checking raw userinput against plaintext password?
Him:
There is no point in doing it securely here because if they want, the students can go take a seperate course on security
Me:
So no point in teaching students that they should write their code secure by default and just leave it as a afterthought?
Him:
Yes, because this is how i have always done it
Me:
———
Him:
Okay, time for a break
*leaves room*
Me:
*Uses the break to teach all students about sql injection, password hash and salt, rainbow tables and user input sanitizing*
Him:
*comes back*
Students to teacher:
He's right, if you dont teach us to code securely by default, we are likely to end up causing a data leak or be hacked, if you dont teach us properly we have no point coming here
Me:
*Smiles at the teacher with a face that says: Pwnd*
Him:
Alright then, tell me whats wrong in my code
I was so proud that i helped the class understand secure by default principles61