How to avoid the problem of MongoDB injection effectively

SQL injection is a common problem in relational databases and is uncommon in non-relational databases.

In the article "Security Alert, a simple MongoDB injection", the paper describes the injection problem of MongoDB under PHP.

So, is there such a problem in other languages (like Python, Nodejs)?
Do they have a generic test and avoid the injection method?

Reply content:

SQL injection is a common problem in relational databases and is uncommon in non-relational databases.

In the article "Security Alert, a simple MongoDB injection", the paper describes the injection problem of MongoDB under PHP.

So, is there such a problem in other languages (like Python, Nodejs)?
Do they have a generic test and avoid the injection method?

And the way to prevent SQL injection

Do not trust any user's input, including cookies

Convert, Escape

An easy way to prevent injection is not to expose the raw query to the external part, you can use the ORM framework, or define a set of query mapping rules

Only the programmer is more reliable! There's no other way.

