Hacker News new | ask | show | jobs
by user5994461 2150 days ago
In my experience it's too complicated to explain or they don't want to understand (the software has to ship yesterday). Have to show them.

    api.example.com/;SELECT * FROM customers
See. This is allowing anybody to dump all customers or delete customers (show the next query). Developers understand that this is not an intended feature.