Re: checking for embedded values in DBI calls

2010-04-22 Thread John Scoles
Hmm the DBI police?? Would be nice to have a DBD report back that the 'SQL' that you entered is whacked and will take forever to run do not blame 'Perl' for poor performance. Sounds like a good idea but at what point do you draw the line. I guess what you can catch are SQL injection situati

checking for embedded values in DBI calls

2010-04-22 Thread Gabor Szabo
Hi, I have just noticed a web application I am using has embedded values in SQL statements instead of placeholders and it does not check the input from the user which causes a nice error message (including the whole SQL statement) being part of the response page. I reported to the site owner but I