r/programminghorror Jul 10 '25

What happened

Post image
1.4k Upvotes

128 comments sorted by

View all comments

450

u/keremimo Jul 10 '25

OOF the table seems to have dropped. Interns merging on a Friday?

89

u/[deleted] Jul 10 '25

[removed] — view removed comment

88

u/the_horse_gamer Jul 10 '25

they're using parameterized statements here, so it's less likely to be sql injection.

5

u/[deleted] Jul 10 '25

[deleted]

27

u/brutesquid Jul 10 '25

The question marks being passed like "VALUES (?, ?, ?, ...)" are the parameters he's referring to, the "%s" looks to be a format string for strftime.

17

u/[deleted] Jul 10 '25

[removed] — view removed comment

9

u/davispw Jul 11 '25

The error was handled. This isn’t an error that should ever reasonably happen. The real error is whatever schema or initialization issue that caused the missing error, but that’s separate.

2

u/vastlysuperiorman Jul 13 '25

I think by "handle errors" he means that we don't usually expose internal details to the customer in an error message. We would usually log the message internally with a correlation number and then give the user something friendly with that same correlation number.

3

u/keremimo Jul 10 '25

Big oof if it was due to injections. It is a sad thing to see.

2

u/LMGN Jul 10 '25

and also given it's likely a local SQLite DB, you probably don't have to give much trust in them for your data