Who is Bobby Tables?

From the webcomic xkcd

xkcd Bobby Tables Cartoon

School: Hi, this is your son's school. We're having some computer trouble.

Mom: Oh, dear -- Did he break something?

School: In a way. Did you really name your son Robert'); DROP TABLE Students;--?

Mom: Oh. Yes. Little Bobby Tables we call him.

School: Well, we've lost this year's student records. I hope you're happy.

Mom: And I hope you've learned to sanitize your database inputs.


See the sidebar to the left for your specific language.

Other resources

Patches welcome

Don't see a programming language that you'd like to see represented? Please let me know if you have updates or additions through one of these methods, in decreasing order of preference.

Help translating this site

I'm looking for people to host non-English versions of this site. Much of the translation work for German, Russian and Spanish has been done. If you're interested, please sign up for the bobby-tables mailing list on Google Groups and let us know.

To do

  • Explain why creating code from outside data is bad.
  • Potential speed win when reusing prepared statements.


Thanks to the following folks for their contributions: