-
Notifications
You must be signed in to change notification settings - Fork 435
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Let multi statements be optional #500
Conversation
- Disabling multi statements can help protect against SQL injection attacks.
Disabling multi statements can not protect against SQL injection attacks. |
Yes, I agree, thanks for clarifying that. The reason behind this PR is that some security experts consider it good practice to disable multi statements if you don’t intend to use them. So I would really appreciate getting this merged to avoid having to use a forked version of this library. Thank you for your fast response as well :) |
@methane would it be ok to merge this functionality if we rephrase the text a bit? Companies have demands from customers with regards to this. And it would be great if the community software could comply, even though it doesn’t fix all security issues it’s one step on the way for safer software out there :) |
Thank you for your feedback @methane I’ve updated the PR now 👍 |
Disabling multi statements can help protect against SQL injection attacks.