All Questions
3 questions
45votes
5answers
7kviews
SQL sanitizing in code with no user input
In my company's codebase, we hardcode sql queries without using an ORM. Here's an example of a query we would run: UPDATE client SET status="active" WHERE client_id=123 Since the query is ...
1vote
2answers
290views
Securing e-commerce administrator panel with a VPN
I am developing the back-end of an e-commerce system, which has customer and administrator type accounts. These two roles do not overlap, administrators are there to do the back office work, while ...
- 407
10votes
3answers
4kviews
REST API authorization strategies
There are a lot of questions on here that deal with the mechanics of authentication and authorization of RESTful APIs but none of them appear to go in to details of how to implement secure services at ...
- 165
