SQL Injection: When Your Query Is Written by the Attacker
The clearest case of data becoming code. How a login form ends up running the attacker's SQL, why escaping is the wrong fix, and the one that actually ends it.
Security From the Ground Up02
Subject · 3 posts
databases
SQL or NoSQL: Just Use Postgres, and the Cases Where You Should Not
NoSQL was sold as the future and is really a specialised tool. What each kind buys, why relational is the right default, and the real cases for reaching past it.
Building Backends04
Databases and ACID: What a Transaction Actually Promises
A transaction is a promise the database makes when two things happen at once. What ACID guarantees, the anomalies it prevents, and the race it does not.
Building Backends03