DEV Community

Discussion on: SQL is Insecure

Collapse
 
davehay profile image
David Hay

SQL injection is an avoidable flaw. Just because programmers are too lazy or incompetent to avoid this doesn't invalidate the technology.

If we abandoned every technology with security issues there wouldn't be many left. Lets start with anything developed in C and C++.

Collapse
 
kellogh profile image
Tim Kellogg

Honestly, I think we have, to a large extent, stopped using C and it's resulted in far fewer security vulnerabilities. We established a healthy fear of manual memory management. C++ is a different story though.