Hacker News new | past | comments | ask | show | jobs | submit login

Shouldn't it be

"); DROP TABLE Employees;--

?




Nope. SQL uses single quotes for delimiting values, not double quotes.


But that would be SQL injection! Unlike the parent. Barbaric.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: