News

Can a simple dash character introduce a security risk? Discover how SQL line comments can open the door to unexpected injection vulnerabilities in several PostgreSQL client libraries!
So I go and investigate and narrow down the problem to a single quote that is finding it's way into a sql query.<BR><BR>This perplexes me as I use parameterized stored procedures for every query ...