Life isn't easy if your last name is 'Null' as it still breaks database entries the world over

[email protected]

Wordpress is a sin against mankind.

[email protected]

Yet here we are, it and the plugins handle too much of my daily traffic. It’s easy to dismiss the piss poor coding, but is done at our peril.

Everyone of us has personal data stored in those God awful plugins, in their thousands of basic security holes

[email protected]

Yep. For the curious, any time a license plate photo couldn’t be fully read by the automated system, it was marked as “NULL” and he was flagged as the driver. So every single red light camera and speeding camera in the area was sending him to court every day.

[email protected]

It happened to a friend who wasn't passing in the proper types into their stored procedures, all strings, and "null" (not case sensitive) conflicted with actual null values. Everything in the web interface were strings, and so was null.

For some people it takes this mistake before they learn to always care about the data types you're passing in.

[email protected]

Shit happens, mistakes are sometimes made. Valve once had code that could delete your entire drive.

[email protected]

With LLM coding increasing, it might be going up. Idk am no pro, just worried.

Tangential, but I find it hilarious how Gemini's syntax fucks up all the time.

I ask it to change my light called "CX2" to red. It complies, like usual, and it reads Okay, changing "CX2" to red., but what it says out loud is Okay, changing "CX two inches to red.

[email protected]

I was NaN years old when I learned this.

[email protected]

Imagine how hard it is to be this bad. Yet still people manage to do it.

[email protected]

any govt system.

[email protected]

Are there character escapes for SQL, to protect against stuff like that?

[email protected]

Input sanitation typically handles this as a string that only includes characters supported by the data type of the table in question. While in transit, the strings might be escaped at certain stages, such as via URL encoding. Though this is considered poor practice in many applications, it’s not uncommon to see. The point, however, is to prevent the evaluation of inputs as anything other than their intended type, whether or not reserved characters are present.

[email protected]