3253
Comments (207)
sorted by:
You're viewing a single comment thread. View all comments, or full comment thread.
14
slopede 14 points ago +14 / -0

SQL injection in 2021? Or even on the code back in 2016 when Gab was launched? I'm no expert but I think someone was sloppy.

3
Berglewits 3 points ago +4 / -1

I was under the impression SQL injection wasnt really doable in most modern versions of SQL.

3
Amaroq64 3 points ago +3 / -0

It's the people coding their own websites and not sanitizing their inputs or whatever. So hackers do shenanigans with the form submissions or whatever and get the server-side code to do a malicious sql query for them.

2
Berglewits 2 points ago +2 / -0

I think i was conflating SQL injection with a different SQL vulnerability that used to exist but was removed in more modern versions some time ago.