mcavoyk / Quirk

Quirk is an open source, hyperlocal, anonymous social media platform for mobile and web clients.
GNU Affero General Public License v3.0
2 stars 0 forks source link

Fix potential SQL Injections #18

Closed mcavoyk closed 5 years ago

mcavoyk commented 5 years ago

fmt.Sprintf is vulnerable to SQL injections. Use sql.Raw/sql.Exec

Used in: