Welcome to the Treehouse Community

Want to collaborate on code errors? Have bugs you need feedback on? Looking for an extra set of eyes on your latest project? Get support with fellow developers, designers, and programmers of all backgrounds and skill levels here with the Treehouse Community! While you're at it, check out some resources Treehouse students have shared here.

Looking to learn something new?

Treehouse offers a seven day free trial for new students. Get access to thousands of hours of content and join thousands of Treehouse students and alumni in the community today.

Start your free trial

Python Using Databases in Python Meet Peewee ORM

Sahar Nasiri
Sahar Nasiri
7,454 Points
Posted by Sahar Nasiri
Sahar Nasiri
7,454 Points

Malicious Queries

What are malicious queries? And what does it mean by "sanitize the queries"?

1 Answer

Brett Wood
Brett Wood
9,805 Points
Brett Wood
Brett Wood
9,805 Points

Here's a couple of links. For the first link, you could think of Treehouse's course search box for example. If they used the query SELECT * FROM Courses WHERE name LIKE 'your_input', then that input form would be ripe for exploitation. Thankfully Rails has a secure ORM which sanitizes stuff. All the links are examples of malicious SQL queries. The process of sanitizing those queries involves escaping characters and a bunch of other stuff.

Cross Site Scripting