Re: Re[4]: string:sub

[Jorge <xxopxe@...>]

On Sun, 2010-03-07 at 17:25 +0300, Bulat Ziganshin wrote:
> >> afaik, Lua philosophy is to guarantee that no crash or security
> >> violation can occur. such philosophy doesn't prohibit g.in->g.out, though
> 
> > I think he was referring to c.
> 
> he said about "Lua's philosophy, not unlike C's one"
> 
> i think that Lua, unlike C, should be safe. in terms of both: crashes
> and security violations


That's language level. On your application level, you are responsible
for validating data. An example is SQL injection: no mather how secure
you database is, if your app don't validate input, breaches will occur.

Jorge