On: Security Vulnerabilities in Heroku

[jiggy2011]

a blank where clause throws an error (in mySQL at least) as it should do. Or will the query generator respond to missing arguments by removing the where clause altogether? In which case that's some pretty nasty behaviour.

[scriby → jiggy2011]

Depends on the flavor of SQL. But also, might not be a totally missing where clause, but just an incomplete one.