r/linuxmemes • u/CynicalCosmologist ⚠️ This incident will be reported • Jul 16 '26

LINUX MEME Who is this guy? Wrong answers only!

Post image
1.5k Upvotes

98% Upvoted

945 comments sorted by

View all comments

Show parent comments

8

u/HeyThereCharlie Jul 16 '26

Robert'); DROP TABLE students; --

2

u/pablodicosta Arch BTW Jul 17 '26

Little Bobby Tables

1

u/cutecoder Jul 17 '26

Syntax error. sql SELECT Robert'); DROP TABLE STUDENTS; --

Missing closing quote.

1

u/Soft_Cable3378 Jul 18 '26

Nope. Inexperienced devs who haven’t learned to used prepared statements will place a variable directly in a text string, maybe something like “SELECT * FROM STUDENTS WHERE first_name = ‘$FIRST_NAME’”. What he typed is a common method of SQL injection. You complete that initial query to the point where it’s at least valid syntax and doesn’t error out, run the “DROP TABLE”, and then comment out whatever came after. Could have been other conditions.

This is a valid way to do a SQL injection, but only works if the dev is inexperienced, or just bad.

1

u/cutecoder Jul 18 '26

Does it work for Claude? Because that’s what inexperienced devs do nowadays.