In spite of this moderator edit, which removed a picture that didn't add anything to the post besides a remotely on-topic caption about strings (the post was about string concatenation, the example with cats; the picture was a cat, with a string. haha...ha.), I promised myself (and the moderator in question) that I'd be more careful in the future.
(besides it was a bad one)
So in my original answer (here), I decided to proactively remove the picture/cartoon that I wanted to put there, but the more I think of it, the more I find it could be in context. It's a [well-known/classic] cartoon that complements this following question I'm asking the OP:
What happens when
authorlnf
contains the value"Robert'); DROP TABLE author;--"
?
...which pretty much quotes the cartoon:
As a compromise, I've decided to remove the picture but still leave a hyperlink to it.
Three questions:
- Should I leave the cartoon in the post, or have I made the right decision by just linking to it?
- When is it appropriate to include a picture in an answer?
- Is it ever appropriate to use a cartoon to illustrate a point?
"INSERT INTO [author] ([authorlnf], [authorfnf]) VALUES ('" & authorlnf & "', '" & authorfnf & "');"
then by providing appropriate parameter values you can thwart the SQL insert as a user of the application, using the parameter(s) to execute malicious SQL - that's a SQL Injection Attack. See this. \$\endgroup\$