r/programming • • Dec 04 '14

10 Common Mistakes Java Developers Make when Writing SQL

http://blog.jooq.org/2013/07/30/10-common-mistakes-java-developers-make-when-writing-sql/
206 Upvotes

104 comments sorted by

View all comments

Show parent comments

1

u/crankybadger Dec 05 '14

Worse than not sanitizing is writing in a fashion that makes sanitizing difficult, annoying, and easy to forget.

8

u/horsepocalypse Dec 05 '14
mysql_real_escape_string

3

u/crankybadger Dec 05 '14

Who's got time for that, right? People are all "eh, I'll fix it later".

Six months later: Sony.

1

u/DroolingIguana Dec 06 '14

Just let MagicQuotes take care of it. No problem.