this post was submitted on 09 Dec 2023
1192 points (97.5% liked)

Programmer Humor

19302 readers
1373 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 1 year ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] GBU_28@lemm.ee 79 points 9 months ago (6 children)

No closing semicolon, anyone got any extras to throw on this thing?

[–] epyon22@sh.itjust.works 30 points 9 months ago (1 children)

; found this in the back for you should still work though

[–] db2@sopuli.xyz 7 points 9 months ago

Can confirm.

[–] Moops@lemmy.world 17 points 9 months ago* (last edited 9 months ago) (2 children)

At the very least I'd try to clean up that fuzzy condition on behavior to anticipate any bad or inconsistent data entry.

WHERE UPPER(TRIM(behavior)) = 'NICE'

Depending on the possible values in behavior, adding a wildcard or two might be useful but would need to know more about that field to be certain. Personally I'd rather see if there was a methodology using code values or existing indicators instead of a string, but that's often just wishful thinking.

Edit: Also, why dafuq we doing a select all? What is this, intro to compsci? List out the values you need, ya heathen ;)

(This is my favorite Xmas meme lol)

[–] mp04610@lemm.ee 12 points 9 months ago

behavior is an ENUM.

[–] moroni@lemmy.ca 4 points 9 months ago

That’s a table scan, right there. Naughty.

[–] pruwybn@discuss.tchncs.de 7 points 9 months ago* (last edited 9 months ago)

Need to normalize the database. I would add a join to a BehaviorTypes table.

Edit: or, if the only options are naughty or nice, make it a boolean.

[–] takeda@lemmy.world 4 points 9 months ago (1 children)

You need semicolons if it is a script with multiple commands to separate them. It is not needed for a single statement, like you would use in most language libraries.

[–] mellejwz@lemmy.world 2 points 9 months ago (1 children)

If you don't use a semicolon directly in MySQL it won't do anything until you add it.

[–] takeda@lemmy.world 2 points 9 months ago

In the MySQL client console where you can run multiple commands.

If you add semicolon in language library commands such as fetch() you will get an error.

[–] krotti@sh.itjust.works 4 points 9 months ago (2 children)

Honest question, which ones wouldn't it work with? Most add a semicolon to the end automatically or have libraries and interfaces saved me a million times?

[–] GBU_28@lemm.ee 4 points 9 months ago (2 children)

Other reply s accurate but it's always a good practice to include the semicolon else you can get

"Bobby tables'ed" look that xkcd comic up

[–] docAvid@midwest.social 8 points 9 months ago (1 children)

I'm not sure how including a final semicolon can protect against an injection attack. In fact, the "Bobby Tables" attack specifically adds in a semicolon, to be able to start a new command. If inputs are sanitized, or much better, passed as parameters rather than string concatenated, you should be fine - nothing can be injected, regardless of the semicolon. If you concatenate untrusted strings straight into your query, an injection can be crafted to take advantage, with or without a semicolon.

[–] GBU_28@lemm.ee 2 points 9 months ago* (last edited 9 months ago)

Yep it would only work if you didn't sanitize a user input string in this case 'nice'

They could write ''; drop table blah;

load more comments (1 replies)
load more comments (1 replies)
[–] fmstrat@lemmy.nowsci.com 2 points 9 months ago

Can we get a SIMILARITY?

[–] Truck_kun@beehaw.org 54 points 9 months ago (1 children)

That SELECT and WHERE are all caps, but from is not is bugging me.

I don't care if you choose to uppercase keywords or lowercase, but consistency please.

Also, great, love it.

[–] cupcakezealot@lemmy.blahaj.zone 7 points 9 months ago (1 children)

it also implies that naughty or nice is an either or thing and not a weighted thing from an incidents table. the good place lied to us.

[–] ursakhiin@beehaw.org 4 points 9 months ago

It could be a materialized view that is generated off of a weighting where you are nice until you have a certain number of incidents.

[–] guy@lemmy.world 38 points 9 months ago (12 children)

Guess that settles the debate, we got to pronounce it "sequel" then to optimally match syllables

[–] RiikkaTheIcePrincess@pawb.social 26 points 9 months ago

Uuugghhh noooo! Ess Kyoo Ell!! ESS KYOO ELL!!! brandishes flaming pitchfork!

[–] db2@sopuli.xyz 11 points 9 months ago (2 children)

Squirrel works too though.

[–] squiblet@kbin.social 6 points 9 months ago (2 children)

The Australian pronunciation works… “squi-rell”. Common American one is somehow just one syllable, “Skwurl”

load more comments (2 replies)
[–] Doug@midwest.social 2 points 9 months ago (1 children)

Yes but he serves a different community

[–] jadero@programming.dev 3 points 9 months ago

!squirrels@lemmy.ca

[–] pythonoob@programming.dev 3 points 9 months ago

Sequel to what?

load more comments (8 replies)
[–] cupcakezealot@lemmy.blahaj.zone 31 points 9 months ago

dammit bobby tables is on the naughty list again

[–] aspitzer@lemmy.world 30 points 9 months ago (2 children)

wait until it hits little bobby tables...

https://xkcd.com/327/

[–] jaybone@lemmy.world 10 points 9 months ago (1 children)

He drops when you are sleeping. He drops when you’re awake.

[–] rufus@discuss.tchncs.de 3 points 9 months ago

Come they told me, pa rum pum pum pum A new born King to see, pa rum pum pum pum Our finest gifts we bring, pa rum pum pum pum To lay before the King, pa rum pum pum pum, rum pum pum pum, rum pum pum pum,

So to honor Him, pa rum pum pum pum, When we come.

Little Bobby, pa rum pum pum pum I am a poor boy too, pa rum pum pum pum I have no gift to bring, pa rum pum pum pum That's fit to give the King, pa rum pum pum pum, rum pum pum pum, rum pum pum pum,

Shall I play for you, pa rum pum pum pum, On my unsanitized database inputs?

...

[–] ApexHunter@lemmy.ml 28 points 9 months ago

I can't be the only one disappointed by the lack of an order by clause after being told the list was being sorted (twice!)...

[–] datelmd5sum@lemmy.world 14 points 9 months ago

Query OK, 0 rows affected

[–] Akrenion@programming.dev 14 points 9 months ago (4 children)

Can anyone recommend a cheap receipt printer that takes pictures from a pc or phone? I want to print mtg tokens on the fly.

[–] meliaesc@lemmy.world 2 points 9 months ago
load more comments (2 replies)
[–] neuracnu@lemmy.blahaj.zone 13 points 9 months ago (1 children)

I was reading that to the tune of the chorus of The Distance by Cake. It worked until the last line.

load more comments (1 replies)
[–] BolexForSoup@kbin.social 12 points 9 months ago* (last edited 9 months ago) (1 children)

He sees you when you’re bashing

He’s hacked your VPN

[–] jballs@sh.itjust.works 5 points 9 months ago (1 children)

He knows you're not in the sudoers file

So he'll report your ass again

[–] Masimatutu@mander.xyz 11 points 9 months ago (1 children)
[–] jballs@sh.itjust.works 6 points 9 months ago

I'll be damned if that's not the most relevant xkcd that I've ever seen.

[–] Donkter@lemmy.world 11 points 9 months ago (1 children)

The beginning maps perfectly to "The Distance" by Cake and I was singing along to that tune as I read.

load more comments (1 replies)
[–] SHBI7368@sh.itjust.works 9 points 9 months ago

Love it keep em coming

[–] tsonfeir@lemm.ee 3 points 9 months ago

I started this in my head sounding like the singer from Cake.

load more comments
view more: next ›