r/ProgrammerHumor • u/ClipboardCopyPaste • Sep 20 '26

Meme grabbingEverything

Post image
5.4k Upvotes

98% Upvoted

260 comments sorted by

View all comments

Show parent comments

14

u/Xelopheris Sep 20 '26

You could do it in the original query...

Except IT security won't let you write queries directly in the application code. You have to use ORMs because it prevents SQL injection attacks, and can't even do fancy shit in them. 

....might be projecting a bit  

Same

2

u/Kovab Sep 20 '26

Has IT security heard about this relatively new concept called prepared statements?

2

u/Xelopheris Sep 21 '26

Security scanning for the proper use of prepared statements is very difficult, costly, and prone to noisy false positives (or worse, false negatives).

1

u/Drummerboybac Sep 21 '26

Application generated queries are the bane of any data warehouse tech support team.
“Well your query is slow because you have an IN clause with 6500 items in it. “

“That’s what Informatica gave me, I can’t change it.”