Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Specifically if using SQL then use prepared statements or equivalent and ensure that the SQL user account uses for queries is restricted to doing just that.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: