Is MySQL more resistant to SQL injection attack than PostgreSQL (under Perl/DBI)?

前端 未结 4 622
误落风尘
误落风尘 2021-01-06 08:12

I am reviewing a Linux based perl web application that contains a login handler with the ubiquitous

my $sth = $DB->prepare(\"SELECT password from passwords where use

4条回答
  •  感情败类
    2021-01-06 08:34

    The MySQL client library seems to limit to one statement per call by default (I encountered it with PHP).

    But that's shouldn't be a reason to use MySQL over PostgreSQL, since you can still inject by using subqueries.

提交回复
热议问题