Skip to content

Conversation

@simlun
Copy link
Contributor

@simlun simlun commented Aug 30, 2021

Disabling multi statements can help protect against SQL injection attacks.

- Disabling multi statements can help protect against SQL injection
  attacks.
@methane
Copy link
Member

methane commented Aug 30, 2021

Disabling multi statements can not protect against SQL injection attacks.
Only placeholder can protect you from SQL injection.

@simlun
Copy link
Contributor Author

simlun commented Aug 30, 2021

Yes, I agree, thanks for clarifying that.

The reason behind this PR is that some security experts consider it good practice to disable multi statements if you don’t intend to use them.

So I would really appreciate getting this merged to avoid having to use a forked version of this library.

Thank you for your fast response as well :)

@simlun
Copy link
Contributor Author

simlun commented Sep 1, 2021

@methane would it be ok to merge this functionality if we rephrase the text a bit?

Companies have demands from customers with regards to this. And it would be great if the community software could comply, even though it doesn’t fix all security issues it’s one step on the way for safer software out there :)

@simlun
Copy link
Contributor Author

simlun commented Sep 2, 2021

Thank you for your feedback @methane

I’ve updated the PR now 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants