Hacker News new | ask | show | jobs
by themenomen 1368 days ago
Mayor issue here seems to be not validating and sanitizing inputs before a DB insert.
1 comments

Or not even being able to log errors and see what the error message says. You don't need to do ahead-of-time sanitization to realize that "Invalid literal for type 'bigint': "120380123#"" means that you should fix your DB type.
>being able to log errors and see what the error message says

A faculty that was, of course, lacking at this particular organization