#web-development

SQL Injection is alive and well

Any mid-level+ developer should be aware of SQL injection, and any production web app written in the last few years should use some simple tools to avoid it. And yet I just found a .NET EF Core project, in production, using this: string keywordSearch...