Re: string:sub

[Florian Weimer <fw@...>]

* Jorge:

> That's language level. On your application level, you are responsible
> for validating data. An example is SQL injection: no mather how secure
> you database is, if your app don't validate input, breaches will occur.

SQL injection is not an input validation problem.  And if your
database provides an embedded SQL compiler, it's rather
straightforward to check that no SQL injection issues exist in your
application.