Thursday, 24 March 2011

Garbage in, Garbage out

Why you should not accept data from users into a DB without checking it.

Exhibit A: "select manufacturer"

<OPTION value="FUJITSO">FUJITSO</OPTION>

<OPTION value="FUJITSU">FUJITSU</OPTION>

<OPTION value="FUJITSU SIEMENS">FUJITSU SIEMENS</OPTION>

<OPTION value="FUJITSU-SIEMEN">FUJITSU-SIEMEN</OPTION>

<OPTION value="FUJITSU-SIEMENES">FUJITSU-SIEMENES</OPTION>

<OPTION value="FUJITSU-SIEMENS">FUJITSU-SIEMENS</OPTION>
at

No comments:

Post a Comment

Ressurection of a WirelessThings OpenPi (from kickstarter)

Many years ago, I was handed one of the openpi kickstarter devices (see https://www.kickstarter.com/projects/wirelessthings/openpi-wireless-...

  • concerto + twitter
    During the trials of concerto at CERN, I wanted to make the text fields a bit more dynamic like say following a specific twitter feed. This...
  • Solar off-grid cabin
    We have a small cabin on the site that used to have a 200w panel, 65Ah deep cycle lead acid battery, el-cheapo PWM charger to power some LED...
  • Nasa TV on PS3
    Since there's no european satellite stream of Nasa TV it means you have to watch a streamed version over here. Also I'd like to w...