Comment by chasil
5 days ago
Many of the complaints you make apply to SQLite as well?
I don't know if dBASE variants support bind variables. That isolation is really required to avoid the "Bobby Tables" effect.
I'd prefer to see the dBASE language adapted to run on SQLite files, as they are a far more profound standard.
OP never mentioned SQLite. Most SQL products support proper ACLs.
I feel good about you, and that you are a good person, through and through. We don't say that enough here.
The permissions exploits on SQLite and dBASE are identical, sad to say.
You're a good guy. I respect you.
And that would be relevant if someone use sqlite as the default database backend for multiuser applications with stored procedures.
That's the problem here: Systems built on sharing the database over a networked filesystem, where one user can not just modify all the data, but can also execute code on all users machines.