this post was submitted on 05 Feb 2025
265 points (98.2% liked)

Programmer Humor

27113 readers
1065 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 2 years ago
MODERATORS
Feyter@programming.dev
anzo@programming.dev
BurningTurtle@programming.dev
pylapp@programming.dev
265
SQL Injection (lemmy.ml)
submitted 8 months ago* (last edited 8 months ago) by HiddenLayer555@lemmy.ml to c/programmer_humor@programming.dev
18 comments fedilink hide all child comments
 

Alternate version:

you are viewing a single comment's thread
view the rest of the comments
[–] MadhuGururajan@programming.dev 1 points 8 months ago (1 children)

No the interviewer is personification of the naive backend that checks only that a specific row is present in the DB, or that's how I read it.

[–] CanadaPlus@lemmy.sdf.org 1 points 8 months ago (1 children)

So I guess the interview is handled by a non-vulnerable intermediate process, which adds the hire to the the main table of employees when at some point in a successful interview, and then calls a notification process that just searches it?

[–] MadhuGururajan@programming.dev 2 points 8 months ago

yeah something like "if new candidate in employee DB == hired"