At the very least I'd try to clean up that fuzzy condition on behavior to anticipate any bad or inconsistent data entry.
WHERE UPPER(TRIM(behavior)) = 'NICE'
Depending on the possible values in behavior, adding a wildcard or two might be useful but would need to know more about that field to be certain. Personally I'd rather see if there was a methodology using code values or existing indicators instead of a string, but that's often just wishful thinking.
Edit: Also, why dafuq we doing a select all? What is this, intro to compsci? List out the values you need, ya heathen ;)
Honest question, which ones wouldn't it work with? Most add a semicolon to the end automatically or have libraries and interfaces saved me a million times?
I'm not sure how including a final semicolon can protect against an injection attack. In fact, the "Bobby Tables" attack specifically adds in a semicolon, to be able to start a new command. If inputs are sanitized, or much better, passed as parameters rather than string concatenated, you should be fine - nothing can be injected, regardless of the semicolon. If you concatenate untrusted strings straight into your query, an injection can be crafted to take advantage, with or without a semicolon.
You need semicolons if it is a script with multiple commands to separate them. It is not needed for a single statement, like you would use in most language libraries.
The only people I know who actually call it ess queue ell are either too new to know the "sequel" pronunciation, or the type of person you generally smell before you see.
I say ess cue ell for the sake of uniformity because it's not Mysequel nor Postgresequel and the language changed from Sequel to the acronym SQL in the 70s so not really in the "too new" ballpark anymore.
I think those make sense as deviations. I've heard "my sequel" but you're absolutely right about postgresql.
The name is kinda irrelevant like hard vs soft g in gif. People know what you mean when you say either.
But in that same vein, the creator of the "graphics interchange format" says the pronunciation is soft g, but basically everyone says hard g... So "official" pronunciation is kinda irrelevant.
I don't judge anyone who uses whichever term they want, but I've just noticed the general trend in my smallish interaction bubble.
Here in Germany everyone I know pronounces the letters individually – as German letters that is, which means the Q is pronounced "coo" rather than "cue". I don't mind it, it's not quite as clunky as in English.
I'm neither, I refuse to pronounce acronyms if it doesn't make sense to do so.
Same thing with 'gooey' for GUI, except I hate that even more because that straight up elicits feelings of disgust, I don't want anything gooey anywhere near any electronics
Come they told me, pa rum pum pum pum
A new born King to see, pa rum pum pum pum
Our finest gifts we bring, pa rum pum pum pum
To lay before the King, pa rum pum pum pum,
rum pum pum pum, rum pum pum pum,
So to honor Him, pa rum pum pum pum,
When we come.
Little Bobby, pa rum pum pum pum
I am a poor boy too, pa rum pum pum pum
I have no gift to bring, pa rum pum pum pum
That's fit to give the King, pa rum pum pum pum,
rum pum pum pum, rum pum pum pum,
Shall I play for you, pa rum pum pum pum,
On my unsanitized database inputs?
No closing semicolon, anyone got any extras to throw on this thing?
; found this in the back for you should still work though
Can confirm.
At the very least I'd try to clean up that fuzzy condition on behavior to anticipate any bad or inconsistent data entry.
WHERE UPPER(TRIM(behavior)) = 'NICE'
Depending on the possible values in behavior, adding a wildcard or two might be useful but would need to know more about that field to be certain. Personally I'd rather see if there was a methodology using code values or existing indicators instead of a string, but that's often just wishful thinking.
Edit: Also, why dafuq we doing a select all? What is this, intro to compsci? List out the values you need, ya heathen ;)
(This is my favorite Xmas meme lol)
behavioris an ENUM.That’s a table scan, right there. Naughty.
Need to normalize the database. I would add a join to a BehaviorTypes table.
Edit: or, if the only options are naughty or nice, make it a boolean.
Honest question, which ones wouldn't it work with? Most add a semicolon to the end automatically or have libraries and interfaces saved me a million times?
Other reply s accurate but it's always a good practice to include the semicolon else you can get
"Bobby tables'ed" look that xkcd comic up
I'm not sure how including a final semicolon can protect against an injection attack. In fact, the "Bobby Tables" attack specifically adds in a semicolon, to be able to start a new command. If inputs are sanitized, or much better, passed as parameters rather than string concatenated, you should be fine - nothing can be injected, regardless of the semicolon. If you concatenate untrusted strings straight into your query, an injection can be crafted to take advantage, with or without a semicolon.
Yep it would only work if you didn't sanitize a user input string in this case 'nice'
They could write ''; drop table blah;
Usually with libraries like jdbc or whatever and prepared statements you don’t need the semicolon.
You need semicolons if it is a script with multiple commands to separate them. It is not needed for a single statement, like you would use in most language libraries.
If you don't use a semicolon directly in MySQL it won't do anything until you add it.
In the MySQL client console where you can run multiple commands.
If you add semicolon in language library commands such as fetch() you will get an error.
Can we get a SIMILARITY?
Guess that settles the debate, we got to pronounce it "sequel" then to optimally match syllables
Uuugghhh noooo! Ess Kyoo Ell!! ESS KYOO ELL!!! brandishes flaming pitchfork!
Squirrel works too though.
The Australian pronunciation works… “squi-rell”. Common American one is somehow just one syllable, “Skwurl”
How do you pronounce Smurf?
I'm not Australian.
Yes but he serves a different community
![email protected]
"Squill"
Sequel to what?
The only people I know who actually call it ess queue ell are either too new to know the "sequel" pronunciation, or the type of person you generally smell before you see.
I say ess cue ell for the sake of uniformity because it's not Mysequel nor Postgresequel and the language changed from Sequel to the acronym SQL in the 70s so not really in the "too new" ballpark anymore.
I think those make sense as deviations. I've heard "my sequel" but you're absolutely right about postgresql.
The name is kinda irrelevant like hard vs soft g in gif. People know what you mean when you say either.
But in that same vein, the creator of the "graphics interchange format" says the pronunciation is soft g, but basically everyone says hard g... So "official" pronunciation is kinda irrelevant.
I don't judge anyone who uses whichever term they want, but I've just noticed the general trend in my smallish interaction bubble.
Don't start the gif war again.
Here in Germany everyone I know pronounces the letters individually – as German letters that is, which means the Q is pronounced "coo" rather than "cue". I don't mind it, it's not quite as clunky as in English.
I do say sequel when speaking English though.
Do you get irritated when Americans refer to the famous Austrian bullpup rifle as the Steyr "Ogg"?
I'm neither, I refuse to pronounce acronyms if it doesn't make sense to do so.
Same thing with 'gooey' for GUI, except I hate that even more because that straight up elicits feelings of disgust, I don't want anything gooey anywhere near any electronics
I've literally never heard GUI said as "gee ewe eye" before.
You could just say UI, avoids the gooey phobia and sounds less weird than g u i.
wait until it hits little bobby tables...
https://xkcd.com/327/
He drops when you are sleeping. He drops when you’re awake.
Come they told me, pa rum pum pum pum A new born King to see, pa rum pum pum pum Our finest gifts we bring, pa rum pum pum pum To lay before the King, pa rum pum pum pum, rum pum pum pum, rum pum pum pum,
So to honor Him, pa rum pum pum pum, When we come.
Little Bobby, pa rum pum pum pum I am a poor boy too, pa rum pum pum pum I have no gift to bring, pa rum pum pum pum That's fit to give the King, pa rum pum pum pum, rum pum pum pum, rum pum pum pum,
Shall I play for you, pa rum pum pum pum, On my unsanitized database inputs?
...
dammit bobby tables is on the naughty list again
I can't be the only one disappointed by the lack of an order by clause after being told the list was being sorted (twice!)...
The beginning maps perfectly to "The Distance" by Cake and I was singing along to that tune as I read.
Cut to Mrs Claus baking a spice cake:
I was reading that to the tune of the chorus of The Distance by Cake. It worked until the last line.
Can anyone recommend a cheap receipt printer that takes pictures from a pc or phone? I want to print mtg tokens on the fly.
Weird that we never consider that for retail workers though…
Pencil
Gameboy Pocket. Gameboy Camera. Gameboy Printer.
Both the perfect balance of “nostalgia” and “ridiculous”.
Love it keep em coming
I started this in my head sounding like the singer from Cake.