SQL Injection Hackers Grand Entrance To Your Database

Omo, first time I'm hearing of nosql injection. One thing I learnt from my first collaboration on a project is not relying on frontend validation alone at any point, always validate every input. Lots of *curious users out there. 🙂 Abeg add race conditions to the list too.

In your backend applications, use standard ORMs, avoid writing raw queries as much as possible, if you have to sanitize your input manually before running them. Always give least privilege access to your database users. Good luck and keep building

A quick one please @AmosPikins and everyone, which of this is okay for password reset: a) tell frontend the (incorrect) email was not found b) say (return) that the email has been sent with status 400 c) (b) but with status 200 ?

C is the correct answer. Cos you must prevent an attacker from knowing if an email exists or not during password reset

Okay, thank you so much. 🙏

Omo. You don explain the thing nice oooo. For someone who deals with SQL, databases and input validation/input Sanition and just being straight up West African. You explain am very nice oooo 🤣. Thank you Prophet

You are welcome boss. Thanks for your support o

Keyword is "always sanitize inputs"

I love your contents sir always informative Thank you baba

I’m literally a rookie in this class. I’m finding it hard to comprehend what n what you’re talking about, but for some reason, I’m interested in knowing everything you’re saying. Although, I’m interested and I need to learn and be a computer or tech literate

I'm so super glad I could understand what you're saying here every single thing even though I don't have the practical experience, just finished Cisco DevNet course where they visited the OWASP top ten threats and how to combat them..and every thing in this video validated that.

A hacker that can’t code low lever is no hacker atall…. Good definition but their other techniques like out bound ,blind etc… nobody can ever be to secure … just focuse on damage control more

Use well-known validation lib on both client & server side If you write your validations yourself, you might miss some edge cases I personally use zod, heard joi is good too

He belike I go like cybersecurity

I believe every beginner backend course taught against storing password without salting it .. But this is a wake up call to the importance of writing defensive code.. 💯

Always here with my notification on 😂

Heattt 🤣🔥🔥🔥

Okay make I go check my works again

Cross-Site Scripting (XSS) Sanitize and escape output. Use Content Security Policy (CSP). Cross-Site Request Forgery (CSRF) Use CSRF tokens on forms. Use CAPTCHA for bots. Use secure password hashing (bcrypt/Argon2). Encrypt data at rest and in transit.

Oga! U don do am again

That double dash at the end 😭😭

You na real prophet you Dey see far Aswr 😂😂😂

Thanks for the update boss

😂

Okay I don follow you You sabi.

Thank you boss. Please do you offer class for Software Development

Yes. My one year fullstack development class started last month... we have done some classes but you can still join though.... its NGN 1M

Do you offer installment

Yes... two times

Okay, location for the training

Virtual.... the onsite class has gone too far

Okay

thank you boss.

Followed You know how to communicate well

I day enjoy your vids wella, especially when it’s from a developers perspective.

This is awhole lot of information, thanks! Very very helpful, time to go implement.

😂😂Amos no go kill me...

Very intelligent

Thank you!

Sir, this is content. Thank you 🫡

Omo I don reach 30 I fit still learn this coding so ?

Yeasssss How old you think say i be?

Reasons why I love using Supabase

Thanks for opening my my head. I really appreciate you for this boss