dhensby
commented
2 years ago 😬
That shows you're not doing any sanitisation of your users input which is a huge security issue in your site.
The fix is not for this library to make opinionated changes to inputs, it's for you to use the database layer safely.
This recent issue may be helpful for you. But you also need to read into SQL injection vulnerabilities and mitigation before your site gets pwned.
max-programming
What this does:
I recently got into a situation where people were adding single quote. And when I added that to the database inside the query, it throws an error. To fix this issue, I replaced the single quotes directly in the library
Related issues:
None
Pre/Post merge checklist: