TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

The trojan Emoji

17 点作者 krogsgard大约 10 年前

3 条评论

feld大约 10 年前
It&#x27;s sad to see this mistake being made repeatedly. It kind of works like this<p><pre><code> 1) Small project started, MySQL is used because that&#x27;s all the developer knows or it&#x27;s convenient 2) Strict mode is never turned on; developer has no idea it exists 3) App gets popular 4) Too late to enable Strict </code></pre> It&#x27;s really the main reason why I don&#x27;t recommend MySQL. Theres so many mistakes waiting to be made.
评论 #9516034 未加载
davidgerard大约 10 年前
Why why why did MySQL have to win the damn race. It&#x27;s the PHP of databases: it more or less works, but you&#x27;re relying on a cardboard skyscraper built on a foundation of poop. And this <i>will</i> come back to bite you.<p>Why MySQL Is Not My Favourite Database: <a href="https:&#x2F;&#x2F;reddragdiva.dreamwidth.org&#x2F;593924.html" rel="nofollow">https:&#x2F;&#x2F;reddragdiva.dreamwidth.org&#x2F;593924.html</a>
Kortaggio大约 10 年前
For anyone interested in knowing how the UTF8 attack works, Mathias Bynens has a fantastic presentation which describes the technical details: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=qFfjJ8pOrWY" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=qFfjJ8pOrWY</a><p>Here&#x27;s the slide deck: <a href="https:&#x2F;&#x2F;speakerdeck.com&#x2F;mathiasbynens&#x2F;hacking-with-unicode" rel="nofollow">https:&#x2F;&#x2F;speakerdeck.com&#x2F;mathiasbynens&#x2F;hacking-with-unicode</a><p>Interesting anecdote from the talk: This isn&#x27;t just unique to Wordpress. Spotify was vulnerable to this at one point.