All that's needed to make SQL injection impossible is sanitizing user
input with mysql_real_escape_string (or whatever function does this in
the language you're using).
How can that be to hard for so many professional coders out there?
Wtf?
The best of ZDNet, delivered
ZDNet Newsletters
Get the best of ZDNet delivered straight to your inbox
