[Tutor] Updating MySQL Database

[wormwood_3]

I loved that strip so much. I printed it today, and it is on the door of our IT office:-)

----- Original Message ----
From: Kent Johnson <kent37 at tds.net>
To: Python Tutorlist <tutor at python.org>
Sent: Wednesday, October 10, 2007 8:52:12 AM
Subject: Re: [Tutor] Updating MySQL Database


Kent Johnson wrote:

> It 
> also looks like you are embedding the data in the SQL command, this
 is 
> very bad practice, it opens you to SQL injection attacks

For a humorous explanation of why you don't want to directly embed data
 
into SQL commands, see today's xkcd:
http://xkcd.com/327/

Kent
_______________________________________________
Tutor maillist  -  Tutor at python.org
http://mail.python.org/mailman/listinfo/tutor