logoalt Hacker News

dyauspitryesterday at 5:19 PM2 repliesview on HN

Yes. SQL querying with standard inbuilt anti injection code when retrieving the transactions that it can write itself.


Replies

customguyyesterday at 6:02 PM

What kind of "standard inbuilt anti injection code" are you referring to? Mysql_real_escape_string()?

show 1 reply
troupoyesterday at 8:15 PM

How does this prevent prompt injection described in the article?

How does it prevent DDOSing and/or exposing the database from an injected prompt?

show 1 reply