Skip to contentExploitQuest
LearnSecure CodingNever Build a Query as a String

Chapter 01 of 08 · Secure Coding

Never Build a Query as a String

The one rule with no exceptions, and why every escaping-by-hand approach has failed.

FreeMedium
1 lesson5 quiz questionsabout 3 minup to 40 XP

One-sided — This course teaches writing the version that does not have the bug. The attack each rule prevents is taught in web security, where it is played rather than described; repeating it here would be a worse version of that course.

Start this chapterParameterise Everything
  1. Parameterise Everything3 min
  2. Practice quiz5 questions