Comment on Life isn't easy if your last name is 'Null' as it still breaks database entries the world over

• undefined@lemmy.hogru.ch ⁨1⁩ ⁨month⁩ ago

  Unless you’re coding from scratch it’s hard to not do this with any modern framework.

  source

  • limer@lemmy.dbzer0.com ⁨1⁩ ⁨month⁩ ago

    Legacy systems still handle more traffic than modern ones, I’d wager

    source

    • T156@lemmy.world ⁨1⁩ ⁨month⁩ ago

      And it’s probably not seen as urgent enough an issue to need replacing the whole system for.

      source
    • acosmichippo@lemmy.world ⁨1⁩ ⁨month⁩ ago

      any govt system.

      source
  • limer@lemmy.dbzer0.com ⁨1⁩ ⁨month⁩ ago

    Word press code, and plugins, do not sanitize out of the box. You have to call an additional function, each time, that is not provided automatically. Many home made plugins miss that; many popular plugins used to be home made ones

    source

    • PixelTron@lemm.ee ⁨1⁩ ⁨month⁩ ago

      Wordpress is a sin against mankind.

      source

      • Atherel@lemmy.dbzer0.com ⁨1⁩ ⁨month⁩ ago

        Let’s take a blog and slap a whole e-commerce system on it through a plugin and let it auto translate with another one, what could go wrong. wait why is everything so slow, oh i need additional plugins for caching and one more for functionality XYZ why is everything broken now?!?

        source

        • -> View More Comments
      • limer@lemmy.dbzer0.com ⁨1⁩ ⁨month⁩ ago

        Yet here we are, it and the plugins handle too much of my daily traffic. It’s easy to dismiss the piss poor coding, but is done at our peril.

        Everyone of us has personal data stored in those God awful plugins, in their thousands of basic security holes

        source
  • SkaveRat@discuss.tchncs.de ⁨1⁩ ⁨month⁩ ago

    A couple years ago I wanted to write a simple website with SQL injection vulnerability, so I could demonstrate sqlmap to someone

    It was surprisingly difficult (and every fiber in my body screamed)

    source

    • fuckwit_mcbumcrumble@lemmy.dbzer0.com ⁨1⁩ ⁨month⁩ ago

      Imagine how hard it is to be this bad. Yet still people manage to do it.

      source
  • Cocodapuf@lemmy.world ⁨1⁩ ⁨month⁩ ago

    Unless you’re coding from scratch it’s hard to not do this with any modern framework.

    I think that word modern is doing a lot of heavy lifting there.

    A lot of systems simply aren’t modern. There’s always that mentality of “well, it’s been working for the last 12 years, let’s not mess with it now”, despite all the valid objections like "but it’s running on Windows2000” or “it’s a data beach waiting to happen”…

    source

    • undefined@lemmy.hogru.ch ⁨1⁩ ⁨month⁩ ago

      Is it though? I haven’t used a framework since probably 2007 that doesn’t do this. There are the smaller, more DIY frameworks out there but I’ve never used them professionally.

      source
    • Llewellyn@lemm.ee ⁨1⁩ ⁨month⁩ ago

      What is a data beach?

      source

      • Cocodapuf@lemmy.world ⁨1⁩ ⁨month⁩ ago

        Thanks, I missed that

        source