SQL Injection

[mass]

There are absolutely no safeguards in place right now to prevent this. At this point, a fifth grader could probably bring down the whole site.

[alanguichard]

How do we fix?

Sent from my iPhone

On Oct 15, 2014, at 8:27 PM, Andrew Mass notifications@github.com wrote:

There are absolutely no safeguards in place right now to prevent this. At this point, a fifth grader could probably bring down the whole site.

—
Reply to this email directly or view it on GitHub.

[avp]

https://github.com/felixge/node-mysql#escaping-query-identifiers

[mass]

👍