I loved that strip so much. I printed it today, and it is on the door of our IT 
office:-)

----- Original Message ----
From: Kent Johnson <[EMAIL PROTECTED]>
To: Python Tutorlist <tutor@python.org>
Sent: Wednesday, October 10, 2007 8:52:12 AM
Subject: Re: [Tutor] Updating MySQL Database


Kent Johnson wrote:

> It 
> also looks like you are embedding the data in the SQL command, this
 is 
> very bad practice, it opens you to SQL injection attacks

For a humorous explanation of why you don't want to directly embed data
 
into SQL commands, see today's xkcd:
http://xkcd.com/327/

Kent
_______________________________________________
Tutor maillist  -  Tutor@python.org
http://mail.python.org/mailman/listinfo/tutor



_______________________________________________
Tutor maillist  -  Tutor@python.org
http://mail.python.org/mailman/listinfo/tutor

Reply via email to