DEV Community

Discussion on: SQL is Insecure

Collapse
 
kellogh profile image
Tim Kellogg

So cool seeing a young developer like yourself interested in writing quality code. I think you're thoughts are on the right track in terms of API. One of the tough things that you'll learn in the next few years is that, even though you put a lot of effort into making good decisions, there's 100 others that are paid per line of code. Just because a tool is useful doesn't mean it should be used.

For instance, manual memory management. We've done a good job making developers scared of writing C and having to manage memory using malloc/free. That's saved us a lot of buggy programs and a ton of security vulnerabilities (e.g. sloppily reused buffers). We need to do the same thing with SQL. I mean, C# has Linq, that seems to have worked reasonably well.

Collapse
 
legolord208 profile image
jD91mZM2

I think SQL is neither hard enough, or critical enough to just abandon.
And if somebody started paying me for doing a sloppy job, I'd switch job. And god knows what I'd do if there are no "good" jobs...