1184
It's that time of the year again! (files.mastodon.social)
top 50 comments
sorted by: hot top controversial new old
[-] GBU_28@lemm.ee 79 points 9 months ago

No closing semicolon, anyone got any extras to throw on this thing?

[-] epyon22@sh.itjust.works 30 points 9 months ago

; found this in the back for you should still work though

[-] db2@sopuli.xyz 7 points 9 months ago

Can confirm.

[-] Moops@lemmy.world 16 points 9 months ago* (last edited 9 months ago)

At the very least I'd try to clean up that fuzzy condition on behavior to anticipate any bad or inconsistent data entry.

WHERE UPPER(TRIM(behavior)) = 'NICE'

Depending on the possible values in behavior, adding a wildcard or two might be useful but would need to know more about that field to be certain. Personally I'd rather see if there was a methodology using code values or existing indicators instead of a string, but that's often just wishful thinking.

Edit: Also, why dafuq we doing a select all? What is this, intro to compsci? List out the values you need, ya heathen ;)

(This is my favorite Xmas meme lol)

[-] mp04610@lemm.ee 12 points 9 months ago

behavior is an ENUM.

[-] moroni@lemmy.ca 4 points 9 months ago

That’s a table scan, right there. Naughty.

[-] pruwybn@discuss.tchncs.de 7 points 9 months ago* (last edited 9 months ago)

Need to normalize the database. I would add a join to a BehaviorTypes table.

Edit: or, if the only options are naughty or nice, make it a boolean.

[-] krotti@sh.itjust.works 4 points 9 months ago

Honest question, which ones wouldn't it work with? Most add a semicolon to the end automatically or have libraries and interfaces saved me a million times?

[-] GBU_28@lemm.ee 4 points 9 months ago

Other reply s accurate but it's always a good practice to include the semicolon else you can get

"Bobby tables'ed" look that xkcd comic up

[-] docAvid@midwest.social 8 points 9 months ago

I'm not sure how including a final semicolon can protect against an injection attack. In fact, the "Bobby Tables" attack specifically adds in a semicolon, to be able to start a new command. If inputs are sanitized, or much better, passed as parameters rather than string concatenated, you should be fine - nothing can be injected, regardless of the semicolon. If you concatenate untrusted strings straight into your query, an injection can be crafted to take advantage, with or without a semicolon.

[-] GBU_28@lemm.ee 2 points 9 months ago* (last edited 9 months ago)

Yep it would only work if you didn't sanitize a user input string in this case 'nice'

They could write ''; drop table blah;

load more comments (1 replies)
load more comments (1 replies)
[-] takeda@lemmy.world 4 points 9 months ago

You need semicolons if it is a script with multiple commands to separate them. It is not needed for a single statement, like you would use in most language libraries.

[-] mellejwz@lemmy.world 2 points 9 months ago

If you don't use a semicolon directly in MySQL it won't do anything until you add it.

load more comments (1 replies)
[-] fmstrat@lemmy.nowsci.com 2 points 9 months ago

Can we get a SIMILARITY?

[-] Truck_kun@beehaw.org 54 points 9 months ago

That SELECT and WHERE are all caps, but from is not is bugging me.

I don't care if you choose to uppercase keywords or lowercase, but consistency please.

Also, great, love it.

[-] cupcakezealot@lemmy.blahaj.zone 7 points 9 months ago

it also implies that naughty or nice is an either or thing and not a weighted thing from an incidents table. the good place lied to us.

[-] ursakhiin@beehaw.org 4 points 9 months ago

It could be a materialized view that is generated off of a weighting where you are nice until you have a certain number of incidents.

[-] guy@lemmy.world 38 points 9 months ago

Guess that settles the debate, we got to pronounce it "sequel" then to optimally match syllables

[-] RiikkaTheIcePrincess@pawb.social 26 points 9 months ago

Uuugghhh noooo! Ess Kyoo Ell!! ESS KYOO ELL!!! brandishes flaming pitchfork!

[-] db2@sopuli.xyz 11 points 9 months ago

Squirrel works too though.

[-] squiblet@kbin.social 6 points 9 months ago

The Australian pronunciation works… “squi-rell”. Common American one is somehow just one syllable, “Skwurl”

load more comments (2 replies)
[-] Doug@midwest.social 2 points 9 months ago

Yes but he serves a different community

[-] jadero@programming.dev 3 points 9 months ago

!squirrels@lemmy.ca

[-] pythonoob@programming.dev 3 points 9 months ago

Sequel to what?

load more comments (8 replies)
[-] cupcakezealot@lemmy.blahaj.zone 30 points 9 months ago

dammit bobby tables is on the naughty list again

[-] aspitzer@lemmy.world 30 points 9 months ago

wait until it hits little bobby tables...

https://xkcd.com/327/

[-] jaybone@lemmy.world 10 points 9 months ago

He drops when you are sleeping. He drops when you’re awake.

[-] rufus@discuss.tchncs.de 3 points 9 months ago

Come they told me, pa rum pum pum pum A new born King to see, pa rum pum pum pum Our finest gifts we bring, pa rum pum pum pum To lay before the King, pa rum pum pum pum, rum pum pum pum, rum pum pum pum,

So to honor Him, pa rum pum pum pum, When we come.

Little Bobby, pa rum pum pum pum I am a poor boy too, pa rum pum pum pum I have no gift to bring, pa rum pum pum pum That's fit to give the King, pa rum pum pum pum, rum pum pum pum, rum pum pum pum,

Shall I play for you, pa rum pum pum pum, On my unsanitized database inputs?

...

[-] ApexHunter@lemmy.ml 28 points 9 months ago

I can't be the only one disappointed by the lack of an order by clause after being told the list was being sorted (twice!)...

[-] Akrenion@programming.dev 15 points 9 months ago

Can anyone recommend a cheap receipt printer that takes pictures from a pc or phone? I want to print mtg tokens on the fly.

[-] meliaesc@lemmy.world 2 points 9 months ago
[-] jasondj@ttrpg.network 2 points 9 months ago

Gameboy Pocket. Gameboy Camera. Gameboy Printer.

Both the perfect balance of “nostalgia” and “ridiculous”.

load more comments (1 replies)
[-] datelmd5sum@lemmy.world 14 points 9 months ago

Query OK, 0 rows affected

[-] neuracnu@lemmy.blahaj.zone 12 points 9 months ago

I was reading that to the tune of the chorus of The Distance by Cake. It worked until the last line.

load more comments (1 replies)
[-] BolexForSoup@kbin.social 12 points 9 months ago* (last edited 9 months ago)

He sees you when you’re bashing

He’s hacked your VPN

[-] jballs@sh.itjust.works 5 points 9 months ago

He knows you're not in the sudoers file

So he'll report your ass again

[-] Donkter@lemmy.world 11 points 9 months ago

The beginning maps perfectly to "The Distance" by Cake and I was singing along to that tune as I read.

load more comments (1 replies)
[-] SHBI7368@sh.itjust.works 9 points 9 months ago

Love it keep em coming

[-] tsonfeir@lemm.ee 3 points 9 months ago

I started this in my head sounding like the singer from Cake.

load more comments
view more: next ›
this post was submitted on 09 Dec 2023
1184 points (97.2% liked)

Programmer Humor

19292 readers
1208 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 1 year ago
MODERATORS