this post was submitted on 09 Dec 2023
1192 points (97.5% liked)

Programmer Humor

19463 readers
778 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 1 year ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] GBU_28@lemm.ee 79 points 11 months ago (6 children)

No closing semicolon, anyone got any extras to throw on this thing?

[–] epyon22@sh.itjust.works 30 points 11 months ago (1 children)

; found this in the back for you should still work though

[–] db2@sopuli.xyz 7 points 11 months ago

Can confirm.

[–] Moops@lemmy.world 17 points 11 months ago* (last edited 11 months ago) (2 children)

At the very least I'd try to clean up that fuzzy condition on behavior to anticipate any bad or inconsistent data entry.

WHERE UPPER(TRIM(behavior)) = 'NICE'

Depending on the possible values in behavior, adding a wildcard or two might be useful but would need to know more about that field to be certain. Personally I'd rather see if there was a methodology using code values or existing indicators instead of a string, but that's often just wishful thinking.

Edit: Also, why dafuq we doing a select all? What is this, intro to compsci? List out the values you need, ya heathen ;)

(This is my favorite Xmas meme lol)

[–] mp04610@lemm.ee 12 points 11 months ago

behavior is an ENUM.

[–] moroni@lemmy.ca 4 points 11 months ago

That’s a table scan, right there. Naughty.

[–] pruwybn@discuss.tchncs.de 7 points 11 months ago* (last edited 11 months ago)

Need to normalize the database. I would add a join to a BehaviorTypes table.

Edit: or, if the only options are naughty or nice, make it a boolean.

[–] takeda@lemmy.world 4 points 11 months ago (1 children)

You need semicolons if it is a script with multiple commands to separate them. It is not needed for a single statement, like you would use in most language libraries.

[–] mellejwz@lemmy.world 2 points 11 months ago (1 children)

If you don't use a semicolon directly in MySQL it won't do anything until you add it.

[–] takeda@lemmy.world 2 points 11 months ago

In the MySQL client console where you can run multiple commands.

If you add semicolon in language library commands such as fetch() you will get an error.

[–] krotti@sh.itjust.works 4 points 11 months ago (2 children)

Honest question, which ones wouldn't it work with? Most add a semicolon to the end automatically or have libraries and interfaces saved me a million times?

[–] GBU_28@lemm.ee 4 points 11 months ago (2 children)

Other reply s accurate but it's always a good practice to include the semicolon else you can get

"Bobby tables'ed" look that xkcd comic up

[–] docAvid@midwest.social 8 points 11 months ago (1 children)

I'm not sure how including a final semicolon can protect against an injection attack. In fact, the "Bobby Tables" attack specifically adds in a semicolon, to be able to start a new command. If inputs are sanitized, or much better, passed as parameters rather than string concatenated, you should be fine - nothing can be injected, regardless of the semicolon. If you concatenate untrusted strings straight into your query, an injection can be crafted to take advantage, with or without a semicolon.

[–] GBU_28@lemm.ee 2 points 11 months ago* (last edited 11 months ago)

Yep it would only work if you didn't sanitize a user input string in this case 'nice'

They could write ''; drop table blah;

load more comments (1 replies)
load more comments (1 replies)
[–] fmstrat@lemmy.nowsci.com 2 points 11 months ago

Can we get a SIMILARITY?

[–] Truck_kun@beehaw.org 54 points 11 months ago (1 children)

That SELECT and WHERE are all caps, but from is not is bugging me.

I don't care if you choose to uppercase keywords or lowercase, but consistency please.

Also, great, love it.

[–] cupcakezealot@lemmy.blahaj.zone 7 points 11 months ago (1 children)

it also implies that naughty or nice is an either or thing and not a weighted thing from an incidents table. the good place lied to us.

[–] ursakhiin@beehaw.org 4 points 11 months ago

It could be a materialized view that is generated off of a weighting where you are nice until you have a certain number of incidents.

[–] guy@lemmy.world 38 points 11 months ago (12 children)

Guess that settles the debate, we got to pronounce it "sequel" then to optimally match syllables

[–] RiikkaTheIcePrincess@pawb.social 26 points 11 months ago

Uuugghhh noooo! Ess Kyoo Ell!! ESS KYOO ELL!!! brandishes flaming pitchfork!

[–] db2@sopuli.xyz 11 points 11 months ago (2 children)

Squirrel works too though.

[–] squiblet@kbin.social 6 points 11 months ago (2 children)

The Australian pronunciation works… “squi-rell”. Common American one is somehow just one syllable, “Skwurl”

load more comments (2 replies)
[–] Doug@midwest.social 2 points 11 months ago (1 children)

Yes but he serves a different community

[–] jadero@programming.dev 3 points 11 months ago

!squirrels@lemmy.ca

[–] pythonoob@programming.dev 3 points 11 months ago

Sequel to what?

load more comments (8 replies)
[–] cupcakezealot@lemmy.blahaj.zone 31 points 11 months ago

dammit bobby tables is on the naughty list again

[–] aspitzer@lemmy.world 30 points 11 months ago (2 children)

wait until it hits little bobby tables...

https://xkcd.com/327/

[–] jaybone@lemmy.world 10 points 11 months ago (1 children)

He drops when you are sleeping. He drops when you’re awake.

[–] rufus@discuss.tchncs.de 3 points 11 months ago

Come they told me, pa rum pum pum pum A new born King to see, pa rum pum pum pum Our finest gifts we bring, pa rum pum pum pum To lay before the King, pa rum pum pum pum, rum pum pum pum, rum pum pum pum,

So to honor Him, pa rum pum pum pum, When we come.

Little Bobby, pa rum pum pum pum I am a poor boy too, pa rum pum pum pum I have no gift to bring, pa rum pum pum pum That's fit to give the King, pa rum pum pum pum, rum pum pum pum, rum pum pum pum,

Shall I play for you, pa rum pum pum pum, On my unsanitized database inputs?

...

[–] ApexHunter@lemmy.ml 28 points 11 months ago

I can't be the only one disappointed by the lack of an order by clause after being told the list was being sorted (twice!)...

[–] datelmd5sum@lemmy.world 14 points 11 months ago

Query OK, 0 rows affected

[–] Akrenion@programming.dev 14 points 11 months ago (4 children)

Can anyone recommend a cheap receipt printer that takes pictures from a pc or phone? I want to print mtg tokens on the fly.

[–] meliaesc@lemmy.world 2 points 11 months ago
load more comments (2 replies)
[–] neuracnu@lemmy.blahaj.zone 13 points 11 months ago (1 children)

I was reading that to the tune of the chorus of The Distance by Cake. It worked until the last line.

load more comments (1 replies)
[–] BolexForSoup@kbin.social 12 points 11 months ago* (last edited 11 months ago) (1 children)

He sees you when you’re bashing

He’s hacked your VPN

[–] jballs@sh.itjust.works 5 points 11 months ago (1 children)

He knows you're not in the sudoers file

So he'll report your ass again

[–] Masimatutu@mander.xyz 11 points 11 months ago (1 children)
[–] jballs@sh.itjust.works 6 points 11 months ago

I'll be damned if that's not the most relevant xkcd that I've ever seen.

[–] Donkter@lemmy.world 11 points 11 months ago (1 children)

The beginning maps perfectly to "The Distance" by Cake and I was singing along to that tune as I read.

load more comments (1 replies)
[–] SHBI7368@sh.itjust.works 9 points 11 months ago

Love it keep em coming

[–] tsonfeir@lemm.ee 3 points 11 months ago

I started this in my head sounding like the singer from Cake.

load more comments
view more: next ›