1194
It's that time of the year again! (files.mastodon.social)
top 50 comments
sorted by: hot top controversial new old
[-] GBU_28@lemm.ee 79 points 1 year ago

No closing semicolon, anyone got any extras to throw on this thing?

[-] epyon22@sh.itjust.works 30 points 1 year ago

; found this in the back for you should still work though

[-] db2@sopuli.xyz 7 points 1 year ago

Can confirm.

[-] Moops@lemmy.world 17 points 1 year ago* (last edited 1 year ago)

At the very least I'd try to clean up that fuzzy condition on behavior to anticipate any bad or inconsistent data entry.

WHERE UPPER(TRIM(behavior)) = 'NICE'

Depending on the possible values in behavior, adding a wildcard or two might be useful but would need to know more about that field to be certain. Personally I'd rather see if there was a methodology using code values or existing indicators instead of a string, but that's often just wishful thinking.

Edit: Also, why dafuq we doing a select all? What is this, intro to compsci? List out the values you need, ya heathen ;)

(This is my favorite Xmas meme lol)

[-] mp04610@lemm.ee 12 points 1 year ago

behavior is an ENUM.

[-] moroni@lemmy.ca 4 points 1 year ago

That’s a table scan, right there. Naughty.

[-] pruwybn@discuss.tchncs.de 7 points 1 year ago* (last edited 1 year ago)

Need to normalize the database. I would add a join to a BehaviorTypes table.

Edit: or, if the only options are naughty or nice, make it a boolean.

[-] takeda@lemmy.world 4 points 1 year ago

You need semicolons if it is a script with multiple commands to separate them. It is not needed for a single statement, like you would use in most language libraries.

[-] mellejwz@lemmy.world 2 points 1 year ago

If you don't use a semicolon directly in MySQL it won't do anything until you add it.

[-] takeda@lemmy.world 2 points 1 year ago

In the MySQL client console where you can run multiple commands.

If you add semicolon in language library commands such as fetch() you will get an error.

[-] krotti@sh.itjust.works 4 points 1 year ago

Honest question, which ones wouldn't it work with? Most add a semicolon to the end automatically or have libraries and interfaces saved me a million times?

[-] GBU_28@lemm.ee 4 points 1 year ago

Other reply s accurate but it's always a good practice to include the semicolon else you can get

"Bobby tables'ed" look that xkcd comic up

[-] docAvid@midwest.social 8 points 1 year ago

I'm not sure how including a final semicolon can protect against an injection attack. In fact, the "Bobby Tables" attack specifically adds in a semicolon, to be able to start a new command. If inputs are sanitized, or much better, passed as parameters rather than string concatenated, you should be fine - nothing can be injected, regardless of the semicolon. If you concatenate untrusted strings straight into your query, an injection can be crafted to take advantage, with or without a semicolon.

[-] GBU_28@lemm.ee 2 points 1 year ago* (last edited 1 year ago)

Yep it would only work if you didn't sanitize a user input string in this case 'nice'

They could write ''; drop table blah;

load more comments (1 replies)
load more comments (1 replies)
[-] fmstrat@lemmy.nowsci.com 2 points 1 year ago

Can we get a SIMILARITY?

[-] Truck_kun@beehaw.org 54 points 1 year ago

That SELECT and WHERE are all caps, but from is not is bugging me.

I don't care if you choose to uppercase keywords or lowercase, but consistency please.

Also, great, love it.

[-] cupcakezealot@lemmy.blahaj.zone 7 points 1 year ago

it also implies that naughty or nice is an either or thing and not a weighted thing from an incidents table. the good place lied to us.

[-] ursakhiin@beehaw.org 4 points 1 year ago

It could be a materialized view that is generated off of a weighting where you are nice until you have a certain number of incidents.

[-] guy@lemmy.world 38 points 1 year ago

Guess that settles the debate, we got to pronounce it "sequel" then to optimally match syllables

[-] RiikkaTheIcePrincess@pawb.social 26 points 1 year ago

Uuugghhh noooo! Ess Kyoo Ell!! ESS KYOO ELL!!! brandishes flaming pitchfork!

[-] db2@sopuli.xyz 11 points 1 year ago

Squirrel works too though.

[-] squiblet@kbin.social 6 points 1 year ago

The Australian pronunciation works… “squi-rell”. Common American one is somehow just one syllable, “Skwurl”

load more comments (2 replies)
[-] Doug@midwest.social 2 points 1 year ago

Yes but he serves a different community

[-] jadero@programming.dev 3 points 1 year ago

!squirrels@lemmy.ca

[-] pythonoob@programming.dev 3 points 1 year ago

Sequel to what?

load more comments (8 replies)
[-] cupcakezealot@lemmy.blahaj.zone 30 points 1 year ago

dammit bobby tables is on the naughty list again

[-] aspitzer@lemmy.world 30 points 1 year ago

wait until it hits little bobby tables...

https://xkcd.com/327/

[-] jaybone@lemmy.world 10 points 1 year ago

He drops when you are sleeping. He drops when you’re awake.

[-] rufus@discuss.tchncs.de 3 points 1 year ago

Come they told me, pa rum pum pum pum A new born King to see, pa rum pum pum pum Our finest gifts we bring, pa rum pum pum pum To lay before the King, pa rum pum pum pum, rum pum pum pum, rum pum pum pum,

So to honor Him, pa rum pum pum pum, When we come.

Little Bobby, pa rum pum pum pum I am a poor boy too, pa rum pum pum pum I have no gift to bring, pa rum pum pum pum That's fit to give the King, pa rum pum pum pum, rum pum pum pum, rum pum pum pum,

Shall I play for you, pa rum pum pum pum, On my unsanitized database inputs?

...

[-] ApexHunter@lemmy.ml 28 points 1 year ago

I can't be the only one disappointed by the lack of an order by clause after being told the list was being sorted (twice!)...

[-] Akrenion@programming.dev 14 points 1 year ago

Can anyone recommend a cheap receipt printer that takes pictures from a pc or phone? I want to print mtg tokens on the fly.

[-] meliaesc@lemmy.world 2 points 1 year ago
load more comments (2 replies)
[-] datelmd5sum@lemmy.world 14 points 1 year ago

Query OK, 0 rows affected

[-] neuracnu@lemmy.blahaj.zone 13 points 1 year ago

I was reading that to the tune of the chorus of The Distance by Cake. It worked until the last line.

load more comments (1 replies)
[-] BolexForSoup@kbin.social 12 points 1 year ago* (last edited 1 year ago)

He sees you when you’re bashing

He’s hacked your VPN

[-] jballs@sh.itjust.works 5 points 1 year ago

He knows you're not in the sudoers file

So he'll report your ass again

[-] Donkter@lemmy.world 11 points 1 year ago

The beginning maps perfectly to "The Distance" by Cake and I was singing along to that tune as I read.

[-] docAvid@midwest.social 2 points 1 year ago

Cut to Mrs Claus baking a spice cake:

She's all alone, all alone, in her time of spice

[-] SHBI7368@sh.itjust.works 9 points 1 year ago

Love it keep em coming

[-] tsonfeir@lemm.ee 3 points 1 year ago

I started this in my head sounding like the singer from Cake.

load more comments
view more: next ›
this post was submitted on 09 Dec 2023
1194 points (97.5% liked)

Programmer Humor

23172 readers
1419 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 2 years ago
MODERATORS