Noesa
Two usersWeb Security, day by day · Day 2

Build a search feature for a petal catalog

Without the course

“Write SQL to search petals by name and color”

AI inserts search text directly into SQL, allowing injection

After this course

“Write SQL with bound parameters for petal name and color, and allowlist for table/column names”

AI uses parameterized queries and validates identifiers

Always bind values and allowlist dynamic identifiers to block injection

Read Day 2 →Share

Share this tell

The image has the link printed on it, so it still leads back here.

This is one tell — the giveaway that AI is bluffing. It comes from Web Security, day by day, a short daily course on Noesa. Anyone can use AI; few can tell when it's wrong.

More tells →About this course